CLOUDEK · Local script review

PowerShell script risk reviewer

Scan a pasted PowerShell script for risky patterns such as Invoke-Expression, encoded commands, disabled Defender and hard-coded passwords. Static check in your browser; the script is never run.

PS>LOCAL SCRIPT REVIEW

PowerShell script risk reviewer

Paste a PowerShell script to see which risky patterns it contains, on which lines, why they matter and a safer alternative, with a risk score you can check by hand.

Checked locally in this browser with a fixed rule table; the script is not run, sent or saved. Remove real passwords first. If you press the optional Explain with AI button below, only a short summary of the findings and a few masked matched lines are sent, not the whole script; the preview under "Exactly what will be sent" shows them.

Paste a script, or load the risky example (it is text only and is never run).

Limits: this is static pattern matching on text. Obfuscation, string building, encoded or downloaded code and variables can hide behaviour, and a clean result does not mean a script is safe. It is not a malware scanner and does not execute, emulate or test the script. Never run a script you do not understand or trust; test in a lab with -WhatIf first.

Use this result carefully

Scan a pasted PowerShell script for risky patterns such as Invoke-Expression, encoded commands, disabled Defender and hard-coded passwords. Static check in your browser; the script is never run.

Review the limits and privacy notes shown with the tool. Important configuration or security decisions should be checked against authoritative systems and your organization’s approved procedures.

Browse the complete free IT tools directory