It's a custom interpreted scripting language. As long as the interpreter doesn't have any hooks for disk or network I/O, pointer manipulation, etc., it's pretty

It's a custom interpreted scripting language. As long as the interpreter doesn't have any hooks for disk or network I/O, pointer manipulation, etc., it's pretty safe. You could go further by sandboxing in a VM or suchlike if you're concerned about incidental arbitrary-code exploits, but in reality it's not any more dangerous than running any other game server.