Whatever you do, Do not do anything this https://scratch.mit.edu/projects/1060814703/ project would tell you. I have conducted an experiment on myself to check if it would work, using a bookmarklet i made previously on my other st-unshared project, and look at this. I got the same results just like when i ran it from the console. Is this a problem? Absolutely. On the bottom this is what it would tell you if you did that on a console, and the other thing on the top right is what could have gotten you hacked. YOU could have gotten your EMAIL, NETWORK, CSRF TOKEN (which sends requests to scratch and can get you highly blocked if its messed with), OR (never possibly) YOUR SESSION ID (the atomic bomb. intruders can block your account just by having that.). so dont run anything you have no dang idea of.
read the instructions