You can see imported library, strings and possible network calls, working backwards you going to see red flags if it's a basic app.