Embedded JavaScript is code stored inside a PDF file that can execute actions when the document is opened, printed, or when a form field changes. It is often used for interactive forms, validation, or dynamic content, but can also carry malicious intent.

Yes, PDF files can contain malicious JavaScript that exploits vulnerabilities in PDF readers. Attackers may use PDF scripts to download malware, steal data, or perform phishing. This tool helps you review the scripts before opening a suspicious PDF.

Most advanced PDF editors (like Adobe Acrobat Pro) allow you to delete all JavaScript actions. You can also use command-line tools like qpdf to linearize/clean a PDF, or re-print the PDF to a new file (which often strips interactive elements). This inspector only detects scripts, it does not modify files.

No. All analysis happens locally in your browser using the PDF.js library. Your file is never sent over the network, ensuring complete privacy.

This inspector detects document-level JavaScript (scripts attached to the whole PDF, open actions, etc.). Some scripts hidden inside specific annotations or heavily obfuscated streams might not be exposed by the PDF.js API. For a deeper forensic analysis, you may need specialized desktop tools.