Anyway to check if an APK is malicious (easily) wondering about Mihon repos in particular!

So with the recent tachiyomi issues and the migration to Mihon I'm nervous of their list of repos as they're all APKs I'm wondering if anyone knows of any that are definitely legit and from the originals that were self hosted?