Saturn: you could statically include any malicious lib/.so, if you would want to, right now on extras-devel. Especially with program that runs using super-user privileges (which is why I try to compile things downloaded from there myself and diff sources versus what was fed to autobuilder, still something nasty could slip). Standard warnings to the usage of devel repos apply
More worried about wasting your time to make a tool that shouldn't be used by fools fool-proof (in the other sense)