You can limit the stdlib shipped to prevent access to any code you dont want. Http in Nim relies on FFI so it would not work.
Yes it should be usable as a mod scripting language, as long as you limit the stdlib to remove anything that is "unsafe" Slow. `--maxLoopIterationsVM:N` means that infinite loops would crash out of the VM. No clue if there is a way to detect infinite loops aside, or memory usage.
