On my request, a developer gave me a new version of his Android app to test. The app requires root permissions.
I do not know the developer personally. I have no specific reasons to trust or distrust him/her.
How can I check the APK to best ensure it is safe?
Virustotal is a common site to check files, but it's unclear if it is appropriate or comprehensive for Android APK files.