when I create a custom transaction body field. Is there any way to make it read only and only my suitescript can update it?

I don't remember if permissions goes down to a field level in NS. If so have you tried using permissions to restrict access?