@screwtape @mousebot not really in this case; M-x apropos only works on code that you've already loaded, and vetting needs to happen before you load the code
granted you could spin up an isolated VM just for vetting and do it all there?
in an ideal world there would be a way to run emacs in "safe mode" where it has no ability to affect the world (disk, network, etc) outside the directory it was launched in