Download a suspected nulled theme to a local test server (XAMPP/WAMP) with security plugins like MyBB Antivirus or Quttera scanning before uploading to production.