Originally Posted by CyberSEO

Just a hint: EVERY theme and EVERY plugin you download from the Internet may contain ANYTHING including various JS exploits and a backdoor code to your server. You may download it even from WordPress.org because nobody cares to analyze the scripts uploaded into the repository via SVN.

Only a complete idiot may think that the theme/plugin he has downloaded is 100% clean. Thus the sane people do never install any themes or plugins before they analyze them manually. There is only one exception from the rule: theme/plugin was coded by you or by someone you trust.

P.S. Gonna download both his themes and check them manually.