HookAudit: Building a Supply-Chain Security Scanner Without a Supply Chain

What happens when you force a security tool to inspect untrusted code using only standard-library...