bytedance/appshark

Health v2 · maintenance only

Adoption not part of the score

1752 stars · 181 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

AppShark is a static taint analysis platform written in Kotlin that scans Android APKs for security vulnerabilities and compliance issues. It runs as a JVM-based CLI tool driven by JSON5 config files and custom analysis rules, producing JSON results.

Use cases

• scan an android apk for security vulnerabilities
• find taint flows from sources to sinks in android apps
• detect compliance problems in android apps
• detect zip slip path traversal vulnerabilities
• write custom static analysis rules for android

When to choose

• you need static taint analysis of Android APKs without running the app
• you want customizable JSON-based vulnerability detection rules
• you need to audit Android apps for privacy or compliance violations

When to avoid

• you need dynamic analysis or runtime behavior of the app
• you are analyzing non-Android JVM or native code
• you cannot use JDK 11, the only supported runtime

Facets

cli-tool · maturity active

security vulnerability-scanning static-site-generator parser developer-tools security android-tools developer-tools mobile-development jvm cli cross-platform android taint-analysis static-analysis apk kotlin compliance vulnerability-detection

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bytedance/appshark")