for good reason. it's a serious security risk.

Check the code with AI?

All arbitrary Javascript is a "serious security risk" if you're reductive enough.