PowerShell Script Checker
Paste a PowerShell script and check it for common risks, retired Microsoft 365 commands and things you should review before running it.
Check before you run
Opselith reads the script text in this browser. It does not upload the script, connect to your tenant or execute PowerShell.
Paste your PowerShell
Things to check
Start with items marked Needs attention, then review the rest in context.
What the PowerShell Script Checker looks for
The checker is meant for a quick first review before you run an unfamiliar or older script. It looks for common patterns that deserve attention.
- Retired MSOnline and AzureAD PowerShell commands
- Dynamic execution such as Invoke-Expression
- Possible hard-coded passwords, tokens or secrets
- Destructive commands and disabled confirmations
- External web requests and downloaded code
- Execution-policy and certificate-check changes
- Large tenant or directory queries
- Basic unmatched braces, brackets or parentheses
What it does not do
Opselith does not execute the code and does not know your tenant, permissions, data or business intent. Always read the complete script and test important changes safely before production use.
Need a script instead?
Use PowerShell Builder to choose an admin task, configure it and review the generated PowerShell before you run it yourself.