QARK is designed to look for several security-related Android application vulnerabilities in source code or packaged APKs. The tool can also create "Proof-of-Concept" deployable APKs and ADB commands, exploiting many of the vulnerabilities it finds. There is no need to root the test device, as this tool focuses on vulnerabilities that can be exploited under otherwise secure conditions.
Source code and additional information can be found here: https://github.com/linkedin/qark