To install software with Pacman, you have to agree to trust caches. Even with this trust, however, Pacman gives you a number of tools for being careful about installing a package from a remote site. If you are thinking about installing BU:Python for example, you can first
% pacman -l BU:Python
% pacman -fetch BU:Python
% pacman -domain -dom all | grep shell
% pacman -extract-sources .
% pacman -extract-downloads .
% pacman -install -ask shellor with % pacman -install -ask action to stop at each Pacman action.