Trust But Verify is a good policy regardless of where your code comes from.

"AI" code is still human code in some capacity. Human code is what it was trained on. What would you do with a module you grabbed off GitHub or a script you found on Discord? Hopefully the same thing.