AppShark
Static taint analysis platform to scan vulnerabilities
...It performs code analysis without executing the app — inspecting APK contents, tracking data flows (taints), and detecting risky patterns such as insecure file access, unsafe API usage, resource-leak possibilities, or misconfigurations. Users can customize scanning via rule sets (written in JSON), defining which types of vulnerabilities or compliance issues to detect — making AppShark flexible and adaptable to different security policies or threat models. Because it is static and rule-driven, AppShark can scale to large codebases, be integrated into CI/CD pipelines, or operate as part of security audits before publishing or distribution. After analysis, it outputs structured results (e.g. JSON summaries) detailing detected risks, their paths, and metadata.