What's in it now? As it's not an automated build (and the Dockerfile is unknown), you have to vet this using the tools out there.
What's in it next week? You don't have to worry about this when using an image version SHA. Never use latest!
But yes, it mostly sucks. Better roll your own image.