Obviously there is some risk installing any plugin, even those from the WP repository. I would imagine there be even more risk installing from a repository like git where there is even less oversight.

Maybe the next eventual step would be a group that helps curate or rate/certify WP plugins on git. That might help.