@faaatpotato @Aftery manual approval of scripts should be done only when its obfuscated, like there should be an API that should check if the script is obfuscated or not, and for deobfuscated scripts, no one would make a malicious script that is not obfuscated