The solution to executing untrusted code is not to execute more untrusted code, especially through a tool which has not itself been "vetted".