ScriptChecker: To Tame Third-party Script Execution With Task Capabilities