[mr_toad]

Compiling untrusted code isn’t going to save you.

[nv-vn]

No, it won't. But there's no need to compile untrusted code in this scenario. All the code that is run should be packaged in.

[danShumway]

I think you've possibly misunderstood the actual situation. This is a virus scanner. Analyzing untrusted code is the point.

The JS interpreter isn't there to lay out an interface, it's there to help them understand untrusted code that they find on the filesystem.