Figure out which gems are signed given a Gemfile.lock, and tells you which --trust-policy is safe to use with bundler.
Install:
$ gem install bundler_signature_check
Run (in the same directory as your Gemfile.lock):
$ bundler_signature_check
Contributions are welcome - fork and send a pull request.