A CGI wrapper is a script that tries to isolate the environment CGI scripts have access to. They restrict the CGI script to the user and permissions that the user running them has. This does not make a CGI script safe, it just attempts to isolate the amount of damage that can be done.