I read the script and see if I like what I see. As example: https://sh.rustup.rs https://sh.rustup.rs It's really easy to read and useful to understand what it

I read the script and see if I like what I see. As example: https://sh.rustup.rs https://sh.rustup.rs It's really easy to read and useful to understand what it does. If it's too obfuscated and I can't understand it I don't run it and look for other install options or give up If I do spot bugs, I'll go to their github and provide a PR. If I spot something malicious I'll check the github to see who put it in and raise the problem. (if it's not on github then alarm bells)