I found this website on reddit that is intended to be opened using inapp browsers and tells you what JS is injected into the browser (to the best of its ability)

https://inappbrowser.com/

source: https://reddit.com/r/InternetIsBeautiful/comments/wry2xz/see...