TermiSec: Clone the repo. Not the risk.

Why it surfaced

TermiSec combines 29 deterministic checks with containment: projects run without access to personal folders, keys, wallets, browser data, or the network by default. It is unusually clear about its limits, calling static detection imperfect while making a concrete security promise—missed malware wakes up with nothing to steal.

A guarded macOS terminal that runs untrusted coding-interview repositories inside a disposable, offline virtual machine.