I once found a Rust program that streamlined the PKGBUILD reviewing process a lot by, first of all, giving you a really neat list of patterns and behaviours that would make a PKGBUILD suspicios or even plain dangerous, then having a scriptable rule-based engine that would either abort that operation, or show warns and workarounds to you.

I forgot its name, unfortunately, and I installed it on my previous installation (Garuda, now I’m on CachyOS).

Very dumb of my part not to try to write that down before the OS change lol.