Third-Party Script Risk Analyzer
Paste HTML and count external and inline scripts plus async and defer usage.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
Third-Party Script Risk Analyzer
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
Pasted HTML with two external scripts, one async and one defer, plus one inline script, is reported as 3 scripts: 2 external, 1 inline.
What this tool does not do / Limits
This analyzer only counts script tags in pasted HTML. It does not load scripts, judge whether a script is safe, or check what a script does when it runs.
Frequently asked questions
Does this say a script is dangerous?
No. It reports counts and attributes only. Deciding whether a script is trusted is a manual review step.
Does this load the scripts?
No. Nothing is loaded or executed; only the pasted text is counted.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live