闲鱼

Taobao · Goofish is a resale marketplace app that helps you trade idle items safely.

Flutter Shopping Taobao
Bundle ID com.taobao.idlefish
Version analyzed 7.26.20
Build framework Flutter
SDKs detected 11
Analyzed 2026-10-03
Static + runtime analysis

SDKs detected

11 SDKs found across 7 categories. Click any SDK to see every other app that uses it.

All SDKs
From manifest + Info.plist

Permissions requested 14 sensitive

114 permissions requested at runtime. Colors reflect platform sensitivity tier.

Read images sensitive

Read image files from shared storage.

Read audio sensitive

Read audio files from shared storage.

Read videos sensitive

Read video files from shared storage.

Post notifications sensitive

Post notifications to the system.

Approximate location sensitive

Access approximate location (network-based).

Write storage sensitive

Write files to shared external storage. No-op for apps targeting Android 11+.

Microphone sensitive

Record audio from the microphone.

Camera sensitive

Take pictures and record video.

Read storage sensitive

Read files from shared external storage. Replaced by READ_MEDIA_* on Android 13+.

Modify calendar sensitive

Add, modify, or remove calendar events.

Physical activity recognition sensitive

Recognize physical activity such as walking or cycling.

Scan for Bluetooth devices sensitive

Discover nearby Bluetooth devices.

Precise location sensitive

Access exact location via GPS, cell, and Wi-Fi.

Connect to Bluetooth devices sensitive

Connect to paired Bluetooth devices.

High sampling rate sensors standard

Read sensor data at a sampling rate greater than 200 Hz.

com.google.android.gms.permission.AD ID standard
com.android.email.permission.READ ATTACHMENT standard
com.android.email.permission.CHANGE CONFIGURATION standard
com.android.launcher.permission.INSTALL SHORTCUT standard
READ LOGS standard
Vibrate standard

Control the vibrator.

Location provider commands standard

Send extra location-provider commands.

Wake lock standard

Keep the device awake.

Internet access standard

Open network sockets.

Network state standard

Read connectivity information.

Get running tasks standard

Read information about currently running tasks.

Display over other apps standard

Draw windows on top of other apps. Granted from system settings.

FLASHLIGHT standard
Wi-Fi state standard

Read Wi-Fi connection information.

Modify audio settings standard

Modify global audio settings.

DOWNLOAD WITHOUT NOTIFICATION standard
com.ut.permission.DEVICE STATE standard
Foreground service standard

Run a foreground service.

org.agoo.android.permission.MESSAGE standard
com.taobao.fleamarket.intent.action.START standard
com.taobao.fleamarket.intent.action.COCKROACH standard
com.taobao.fleamarket.permission.C2D MESSAGE standard
com.google.android.c2dm.permission.RECEIVE standard
Change network state standard

Change network connectivity state.

Change Wi-Fi state standard

Change Wi-Fi connectivity state.

MOUNT UNMOUNT FILESYSTEMS standard
Bluetooth (legacy) standard

Connect to paired Bluetooth devices on Android 11 and below.

Bluetooth admin (legacy) standard

Discover and pair Bluetooth devices on Android 11 and below.

UPDATE APP OPS STATS standard
BROADCAST PACKAGE ADDED standard
BROADCAST PACKAGE CHANGED standard
BROADCAST PACKAGE INSTALL standard
BROADCAST PACKAGE REPLACED standard
Run at startup standard

Receive the BOOT_COMPLETED broadcast.

BATTERY STATS standard
Manage accounts standard

Manage accounts in the AccountManager.

Act as account authenticator standard

Act as the AccountAuthenticator for the AccountManager.

Use account credentials standard

Request authentication tokens from the AccountManager.

com.sec.android.provider.badge.permission.READ standard
com.sec.android.provider.badge.permission.WRITE standard
com.htc.launcher.permission.READ SETTINGS standard
com.htc.launcher.permission.UPDATE SHORTCUT standard
com.sonyericsson.home.permission.BROADCAST BADGE standard
com.sonymobile.home.permission.PROVIDER INSERT BADGE standard
com.anddoes.launcher.permission.UPDATE COUNT standard
com.majeur.launcher.permission.UPDATE BADGE standard
com.huawei.android.launcher.permission.CHANGE BADGE standard
com.huawei.android.launcher.permission.READ SETTINGS standard
com.huawei.android.launcher.permission.WRITE SETTINGS standard
READ APP BADGE standard
com.oppo.launcher.permission.READ SETTINGS standard
com.oppo.launcher.permission.WRITE SETTINGS standard
me.everything.badger.permission.BADGE COUNT READ standard
me.everything.badger.permission.BADGE COUNT WRITE standard
com.vivo.notification.permission.BADGE ICON standard
Install other apps standard

Request installation of APK packages. Granted per-source from system settings.

Delete other apps standard

Request uninstallation of packages.

oppo.permission.USE FACE standard
USE FACERECOGNITION standard
com.taobao.idlefish.openadsdk.permission.TT PANGOLIN standard
Query all installed apps standard

Query all installed apps regardless of manifest declarations. Restricted by Play policy.

MediaStore.Images.Media.INTERNAL CONTENT URI standard
MediaStore.Images.Media.EXTERNAL CONTENT URI standard
com.taobao.idlefish.permission.C2D MESSAGE standard
Reorder tasks standard

Move tasks within the back stack.

READ SETTINGS standard
com.samsung.android.authservice.permission.READ CONTENT PROVIDER standard
cn.org.ifaa.permission.USE IFAA MANAGER standard
Fingerprint authentication standard

Authenticate using fingerprint hardware.

MANAGE FINGERPRINT standard
com.huawei.permission.USE TSM AGENT standard
SMARTCARD standard
org.simalliance.openmobileapi.SMARTCARD standard
USE FINGERPRIN standard
Biometric authentication standard

Authenticate using biometric hardware.

Schedule exact alarms standard

Schedule alarms that fire at an exact time. Granted from system settings; denied by default on Android 13+.

Send sticky broadcast standard

Send sticky broadcasts.

com.hihonor.security.permission.ACCESS THREAT DETECTION standard
com.xiaomi.security.permission.ACCESS XSOF standard
cn.cyberidentity.certification.AUTH standard
com.hihonor.push.permission.READ PUSH NOTIFICATION INFO standard
Wi-Fi multicast standard

Receive Wi-Fi multicast packets.

Modify system settings standard

Modify system settings. Granted from system settings.

com.asus.msa.SupplementaryDID.ACCESS standard
freemme.permission.msa standard
com.taobao.idlefish.DYNAMIC RECEIVER NOT EXPORTED PERMISSION standard
CAPTURE VIDEO OUTPUT standard
GET PACKAGE INFO standard
com.taobao.taobao.permission.C2D MESSAGE standard
com.taobao.idlefish.permission.MIPUSH RECEIVE standard
com.meizu.c2dm.permission.RECEIVE standard
com.meizu.flyme.push.permission.RECEIVE standard
com.taobao.idlefish.push.permission.MESSAGE standard
com.coloros.mcs.permission.RECIEVE MCS MESSAGE standard
com.heytap.mcs.permission.RECIEVE MCS MESSAGE standard
com.taobao.idlefish.permission.PROCESS PUSH MSG standard
com.taobao.idlefish.permission.PUSH PROVIDER standard
com.meizu.flyme.permission.PUSH standard
NFC standard

Perform I/O over NFC.

Frequently asked questions

What FlyTrap detected inside 闲鱼.

What is 闲鱼 built with?

闲鱼 by Taobao is built with Flutter. FlyTrap determined this by analyzing the app's compiled binary, not from anything the developer published.

What SDKs does 闲鱼 use?

FlyTrap detected 11 third-party SDKs inside 闲鱼, including Huawei AGConnect, Huawei HMS Core and Xiaomi Push (MiPush). They span areas such as Huawei Services, Push Notifications, Payments and Ads. The full list, grouped by category, is on this page.

What permissions does 闲鱼 request?

闲鱼 requests 114 permissions. 14 of these are sensitive, such as Read images, Read audio and Read videos. Each is listed above with its platform sensitivity tier.

Is 闲鱼 safe to use?

FlyTrap reports what an app contains, it does not issue a safety verdict. 闲鱼 requests 114 permissions (14 sensitive) and bundles 11 third-party SDKs. Reviewing those alongside the developer helps you decide what you are comfortable granting.

What platforms is 闲鱼 available on?

The version FlyTrap analyzed targets Android.