Package Privacy

소개

Package Privacy is a comprehensive static analysis tool designed for Android applications and SDKs, focusing on privacy compliance. It automates the process of acquiring, decompiling, and analyzing Android packages to identify privacy-sensitive API calls, JNI libraries, and other behavioral patterns. By integrating AI large model capabilities and an MCP service, the tool provides advanced insights and generates detailed compliance reports, aiding developers and auditors in understanding and mitigating privacy risks within their mobile software.

주요 기능

• Comprehensive Android package acquisition from Maven, URLs, or local files
• Generation of detailed Markdown-formatted privacy compliance analysis reports
• 2 GitHub stars
• Integrated MCP server for advanced AI model interaction and complete analysis workflows
• Automated decompilation of JAR, AAR, and APK files into Java source code using JADX
• Static code analysis for privacy-sensitive API calls and JNI library detection

사용 사례

• Ensuring compliance of Android applications with privacy regulations during development or audits
• Analyzing third-party Android SDKs for potential privacy risks and sensitive data access
• Automating the detection of privacy-related behaviors and JNI libraries within Android packages