The only real way to protect against this sort of thing would be to radically change the way Poser Python is setup, a sandbox coupled with the notion of trusted scripts like Jasc did for PaintShopPro, but the weak link is always going to be the end user.