How do you decide whether to trust a new AI assistant, agent, or plugin before using it?