Yes - this is an important concern, I agree. I hope that ratings/comments/reputation for scaffolds can help here. It's actually no different than installing a gem: you rely on the reputation of the gem author or else recommendations from other users to trust the gem will not do any harm when you try to use it.