Because mod menus require injecting code into a running process, your antivirus may flag them as "hack tools" (which is a false positive usually). However, never run a mod menu that asks for your Steam login credentials.
Stay sneaky, stay modded.