First of all, the itch desktop launcher has a handy basic sandbox system which is worth enabling, and I recommended that you install for the best itch.io experience

Unfortunately if you download via a browser or side-load in android you may get (or lose) more than you bargained for.
Currently itch does not display the app permissions or possible privacy risks with an APK.
It is worth making sure your browsers and devices have the ability to notify you.

First some Android apps/services that will scan APKs and show you detailed info.
VirusTotal scanner by FunnyCat
https://www.appbrain.com/app/virustotal-mobile/com.funnycat.virustotal 
Addons Detector
http://www.addonsdetector.com
https://www.appbrain.com/app/addons-detector/com.denper.addonsdetector
Appbrain AdDetector
https://www.appbrain.com/app/appbrain-ad-detector/com.appspot.swisscodemonkeys.d...

 APK Installer
https://apkinstaller.com
https://www.appbrain.com/app/apk-installer/com.apkinstaller.ApkInstaller

Extensions for desktop browsers (Open Source) 
2 options using VirusTotal
https://add0n.com/virus-checker.html
https://add0n.com/security-plus.html

OPSWAT MetaDefender Chrome Extension
https://www.opswat.com/free-tools

Note: VirusTotal and OPSWAT both require free API keys to upload samples. OPSWAT generates a free key in the extension.
OPSWAT use a smaller set of AV scanners but have the most useful. Executable files can be tested with their remote sandbox.

Developers should also consider using these tools so a list of permissions can be made easily, and you may see exploitable resources you did not notice, such as outdated or compromised libraries.
You will also have some idea which AV are showing false positives when dealing with user complaints.