Which is why Grapheme runs them in a sandbox. You can too.