improve yui module detection to avoid executing arbitrary code

Because of this, `app.js` was executed twice, when calling `node app.js` and then when locator was walking the filesystem. The solution is to guarantee that when detecting if the script is a yui module, we should execute the script in an isolated context without `require` and `module` support.