# AI Photo Lab: Generate & Edit

状态：active
Platform：android
Package：com.photo.art.designer.studio
Version：1.0.1
Opportunity：unlinked

## 摘要

- 包类型：xapk，inner APK 数：5
- 引擎 / 框架：flutter
- SDK 线索：admob, firebase
- Endpoint candidates：5
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.photo.art.designer.studio（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 18 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: flutter（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 5 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 6 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.CAMERA`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_MEDIA_IMAGES`
- `android.permission.RECORD_AUDIO`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.android.vending.BILLING`
- `com.android.vending.CHECK_LICENSE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.photo.art.designer.studio.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：无
- Services：无
- Receivers：无
- Providers：无

## SDK / Endpoint

### SDK

- `admob`
- `firebase`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://www.jsdelivr.com/using-sri-with-dynamic-files
- https://github.com/apvarun/toastify-js
- http://www.jacoco.org/jacoco
- http://www.apache.org/licenses/LICENSE-2.0

## Warnings

- apktool not found; binary AndroidManifest.xml remains undecoded
- binary AndroidManifest.xml is not decoded in static MVP

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。