Read the permissions from the manifest of my-app.apk
aapt2 d permissions my-app.apk
package: com.google.app
uses-permission: name=' android.permission.RECEIVE_BOOT_COMPLETED'
uses-permission: name=' android.permission.ACCESS_WIFI_STATE'
uses-permission: name=' android.permission.INTERNET'
uses-permission: name=' android.permission.ACCESS_NETWORK_STATE'
uses-permission: name=' android.permission.ACCESS_COARSE_LOCATION'
uses-permission: name=' android.permission.ACCESS_FINE_LOCATION'
uses-permission: name=' android.permission.USE_FINGERPRINT'
uses-permission: name=' android.permission.USE_BIOMETRIC'
uses-permission: name=' com.google.android.c2dm.permission.RECEIVE'
uses-permission: name=' android.permission.WAKE_LOCK'
uses-permission: name=' com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE'
uses-permission: name=' android.permission.FOREGROUND_SERVICE'
aapt2
location: $ANDROID_HOME/build-tools/$TOOLS_VERSION/
e.g. "~/Library/Android/sdk/build-tools/29.0.3/aapt2"
https://developer.android.com/studio/command-line/aapt2