Download the client and give it a try. It's a fully functional system and you can see that it runs cleanly.
It is probably impossible (short of reverse engineering or building an extensive test kit) to determine that it runs cleanly without seeing the source code, because for example how do we evaluate how it might work in extreme or panic market conditions, under DDoS or high-frequency trading attacks, etc..