[781]

This is a losing game (think halting problem). This exact scenario was played by antivirus software versus malware in the 90s/00s. The antivirus was trying to figure out if the binary did something like modify a file on disk, while the virus was trying to obfuscate that or find innovative ways of doing it.

A isolation/capability solution is the only one that could work, leftpad shouldn't have access to anything but basic CPU compute.