Could you explain how Shelly does checks on AUR packages? I can’t find where it mentions doing so on its website, and even in its documentation is says:

Enable AUR - Allows access to the AUR download features, these packages are managed by individual users so access at your own risk

How does Shelly make using the AUR safe for people who do are not able to effectively investigate the install scripts themselves?