It's actually not that difficult. F-Droid has a few offline scanners. It depends of course on how much of your experience you want automated. Though it would be nice if Android let you control the more granular permissions like network access.
https://f-droid.org/en/packages/com.secuso.privacyFriendlyCo...