If you are really paranoid you should use cat -v, as otherwise terminal control characters can hide the malicious part of the script.