I haven't used a nulled theme for a client either, and would suggest for you not to. Try to test or run the theme through sites like Virus Total ( there are others similar), then on your local machine and crank up your security. If possible run it on WAMP, InstantWP, Xamp, or Xamplite through a...