Podría crear una API REST que haga código JS y se ejecutaría en la línea de riesgo de seguridad, ¿cómo debo desinfectar la entrada o validarla?

 const { SlashCommandBuilder } = require('@discordjs/builders'); const { Client, Intents, DiscordAPIError } = require('discord.js'); const DiscordJS = require('discord.js') const axios = require('axios').default; module.exports = { data: new SlashCommandBuilder() .setName('httpget') .setDescription('HTTP get command!') .addStringOption(option => option.setName('url') .setDescription('URL of the website') .setRequired(true)), async execute(interaction) { let text = interaction.options.getString('url') //option the user called the bot with axios.get(text).then(resp => { //requet using said URL const contenttotext = `${JSON.stringify(console.log("PWN"))}` //SECURITY RISK interaction.reply({ content: contenttotext //sends it back }) }) .catch(function (error) { // handle error }); } };