I use Obtainium and run this (play store link) in the background/scheduled.

I guess you could download the apk and then scan it before installing, manually but that would get tiring fast. I don’t know of any automated system for that.