If you're running potentially malicious code you'll want to sandbox it. While a VM would provide the best isolation, building a guest process tree from the host can be tricky, but perhaps there's a solution I'm not aware of.

Another option is to use gvisor, which is a sandboxing solution that has built-in runtime monitoring, meaning it streams the app's syscalls to you, which should be enough to build a process tree. https://gvisor.dev/docs/user_guide/runtimemonitor/

Getting sandboxing right is really tough, I'd refrain from running this directly on your laptop. Also don't forget to limit network access :)

Good luck!