It seems like it would be trivial to poison the well so to speak for common function prototypes to add known vulnerabilities that can be exploited later when ne

It seems like it would be trivial to poison the well so to speak for common function prototypes to add known vulnerabilities that can be exploited later when needed. I would be exceedingly cautious about running code inserted by a black box fed by public inputs. Similar attacks have already occurred for NPM and I'm sure many other packagers.