{
  "added_at": "2026-10-20",
  "additional_evidence_urls": [
    "https://github.com/abhirampatel/android-security-toolkit/blob/d9153acad34a062298b15244a0c38f0497680dbf/apk_scanner.py"
  ],
  "category": "android",
  "description_en": "Local Python APK triage tool that drives apktool and strings, checks manifest settings and source/native-library strings, and produces TXT/JSON findings for manual review. Its rules flag possible issues without proving exploitability or reconstructing application behavior.",
  "description_zh": "本地 Python APK 初步分析工具，调用 apktool 与 strings 检查清单配置、源码及原生库字符串，输出 TXT／JSON 结果供人工核验。规则仅提示潜在问题，不证明可利用性，也不重建应用行为。",
  "entry_url": "https://awesomerea.org/resources/android-security-toolkit/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/android-security-toolkit/",
  "evidence_url": "https://github.com/abhirampatel/android-security-toolkit/blob/d9153acad34a062298b15244a0c38f0497680dbf/README.md",
  "group": "tools",
  "id": "android-security-toolkit",
  "json_url": "https://awesomerea.org/resources/android-security-toolkit/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/android-security-toolkit/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/android-security-toolkit/index.md",
  "name": "Android Security Toolkit",
  "name_zh": "Android Security Toolkit：APK 静态初步分析",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Python 3 standard-library imports, separately installed apktool and strings/binutils, and an authorized local APK are required. Manifest analysis depends on successful apktool decoding.",
    "String and manifest-rule matches require manual verification. A symbol, permission or flag alone does not establish an exploitable execution path. The README distinguishes this initial static pass from manual code review, dynamic/native analysis and library CVE matching.",
    "The reviewed two-file tree contains no automated tests or versioned validation corpus. README sample output is an author-provided illustration.",
    "The README states MIT, but the reviewed tree contains no standalone license file."
  ],
  "requirements_zh": [
    "需要 Python 3 标准库、另行安装的 apktool 与 strings／binutils，以及获得授权的本地 APK。清单分析依赖 apktool 成功解码。",
    "字符串与清单规则匹配需人工核验；单个符号、权限或标志不能证明存在可利用的执行路径。README 将这一步静态初筛与人工代码审阅、动态／原生分析及依赖库 CVE 匹配区分开来。",
    "所审阅的两文件仓库没有自动化测试或版本化验证样本。README 示例输出属于作者提供的说明。",
    "README 声明 MIT，但所审阅的仓库树没有独立的许可证文件。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/abhirampatel/android-security-toolkit",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}