iOS/iPadOS: Shortcuts from unknown source - inspect what it does for real

Instead of downloading it on a different device and try to understand the xml-code, you can just download it on your iPad, and then it will open in the shortcuts app without directly being installed or integrated in any way. Instead you will be shown a complete editable copy of the given shortcut like if you did it yourself, and there you can look into every executed part of it.

Just for the record, trusting unknown shortcuts can be really dangerous, I would recommend to send the file to your own email and open it from there. Then you can be sure that it is installed properly and nothing bad happens.