Manifest Match

When submitting an app for review, you declare to the store "We don't use location information" and "We don't share data." But if the actual code doesn't match your declaration, the review gets sent back. I created this tool because manually checking this alignment every time across the 3 apps I've submitted was exhausting.

Just input the repository URL and 5 questions, and it automatically extracts manifest permissions, dependency libraries, and external destinations from the actual code, then cross-checks them against your declarations to detect contradictions. Every finding always includes the source filename and line number as evidence.

What I was most particular about was displaying unconfirmed findings as unconfirmed, not as "no issues". Files that couldn't be read, code generated dynamically, and behaviors only knowable at runtime are shown as "unable to confirm" in a separate section, not as "no problems." If you obscure the limitations of static analysis, you give false reassurance.

Tech stack: Gemini / ADK / Cloud Run (Service + Jobs) / Firestore. For information that can be reliably obtained, we extract it directly with parsers rather than passing it through an LLM. We discovered through actual measurement that when you have the model summarize long analysis results, factual details get lost.

Free to try, no registration required.