$1 per result
Third-Party Script Auditor
Categorize external scripts by purpose and measure their impact.
Who it is for
Performance and security work that needs to know exactly what else is loading on the page.
What you would use it for
- List every external script, stylesheet and iframe, grouped by the domain serving it.
- Categorise third parties by purpose so the page-weight conversation has evidence behind it.
- Find tags nobody remembers adding — the usual outcome of a long-lived marketing site.
- Build the third-party inventory a CSP or a vendor review needs.
What you get back
One JSON record per page checked. These are the actual fields returned by the most recent successful run — read from the live catalogue, not a documented ideal.
| Field | Sample shape |
|---|---|
actor | string |
actorVersion | string — 0.1.0 |
auditedAt | string — 2026-07-29T05:05:25.712Z |
targetUrl | string — https://neighbornest.kids/ |
score | number — 100 |
summary | object (12 keys) |
scripts | object (6 keys) |
stylesheets | object (3 keys) |
iframes | object (2 keys) |
domains | object (4 keys) |
resourceHints | object (3 keys) |
Sample output
Trimmed from a real run.
{
"actor": "artifact-machine-third-party-script-auditor",
"actorVersion": "0.1.0",
"auditedAt": "2026-07-29T05:05:25.712Z",
"targetUrl": "https://neighbornest.kids/",
"score": 100,
"summary": {
"thirdPartyTotal": 0,
"renderBlockingScripts": 0,
"asyncScripts": 0,
"deferScripts": 0,
"thirdPartyStylesheets": 0,
"renderBlockingStylesheets": 0,
"thirdPartyIframes": 0,
"domainCount": 0,
"preconnectHints": 0,
"dnsPrefetchHints": 0,
"preloads": 2,
"internalScripts": 11
},
"scripts": {
"score": 100,
"total": 0,
"renderBlocking": 0,
"async": 0,
"defer": 0,
Pricing
$1 per result. Pay-per-event through Apify — no subscription, and a run that returns nothing costs nothing.
Calling it from code
Any HTTP client works. Replace <TOKEN> with your Apify API token.
curl -X POST "https://api.apify.com/v2/acts/artifact-machine~artifact-machine-third-party-script-auditor/run-sync-get-dataset-items?token=<TOKEN>" \
-H "Content-Type: application/json" \
-d '{"startUrls":[{"url":"https://example.com"}]}'
Questions
Why does the third-party count matter?
Each external origin is a DNS lookup, a connection, a performance cost and a party that can execute code on your page. Most sites accumulate them and remove none. An inventory is the first step of both a performance budget and a Content-Security-Policy.
Other tools
Schema Audit - JSON-LD Structured Data Validator · Security Headers Checker · Sitemap Health Audit - XML Sitemap Validator · Tech Stack Analyzer - Detect Website Technologies
Details read from the live Apify catalogue on 2026-07-29.