yǎoréngǒurbùlùchǐ

Traditional: 咬人狗兒不露齒

lit. the dog that bites does not show its fangs (idiom) / fig. You can't tell the really dangerous enemy from his external appearance.