The AUR is just a repository of PKGBUILDs. You don't need to trust a stranger to use PKGBUILD.