I think the most popular installer right now is this one: Using an installer/script to download the assets is completely legal, because it's just retrieving files that are being distributed for free by valve
What a lot of people do is either download the assets from a third-party or use an installer/scriptĭownloading from a third-party is legally questionable, since they probably don't have the rights to distribute them
Obviously, the most proper way to install CSS assets is to just buy the game on steam and mount it in-game, but you can save $10 by getting the desired assets elsewhere