FòrumCAT

would like to be able to test PRs from others without putting my machine at risk

I know what you mean, but do you not read the diff? Are you working on codebases that are so obfuscated that you can't spot a malicious command?