Box verification

Hi,
How can we know that boxes from vagrant cloud are trustful and does not include any kind of rootkit or other unwanted stuff ?