Inspect APK for security and risk concerns

inspect-apkskillsetup L21
jason0404/Jason-Android-Marketplace
What it does

Inspect Android APK metadata, permissions, components and libraries

Best for

Quickly understanding the surface area, dependencies, and security posture of a third-party or unverified APK before installation or distribution.

Inputs
  • · Path to .apk file
Outputs
  • · File size and composition
  • · Package/version/manifest metadata
  • · Permissions, exported components, deep links
  • · Native ABIs and major size contributors
  • · Optional: HTML report
  • · Tool availability status
Requires
  • · apkanalyzer (Android SDK)
  • · android-apk-analyzer
  • · android-apk-signing-verifier (optional)
  • · android-artifact-report-generator (optional)
Preconditions
  • · APK file exists and is valid
  • · Android SDK tooling discoverable via PATH, ANDROID_HOME, or user-provided path
Failure modes
  • · APK file not found or corrupted
  • · SDK tooling unavailable (limitations listed, not guessed)
  • · APK execution attempted (blocked by safety rules)
Trust signals
  • · Safety rules explicitly forbid modification and execution
  • · Tool unavailability stated as limitation rather than guessed
  • · macOS path hardcoding explicitly forbidden