If you don't know what your code is doing, how do you know your code isn't doing exploitable or harmful things?

如果你都不知道你的代码在做什么，你怎么可能知道你的代码是否正在进行漏洞攻击或者干其他有危害的事？