As Facebook released this Mariana Trench Android app testing for remote code execution vulnerability in a small sample app
https://github.com/facebook/mariana-trench
maybe something for Stackideas to use...? you need Python set up on your machine though
cheers!