1. A method for analyzing source code, the method comprising: identifying, by a computer, a call in a first source code to an application programming interface in a second source code, wherein the first code comprises one or more program statements in an application source code and the second source code comprises one or more program statements in at least one of a library source code and an application source code; responsive to identifying the call in the first source code to the application programming interface in the second source code, determining, by the computer, whether a set of policies for calls to application programming interfaces includes a policy for calls to the application programming interface identified, wherein the policy includes an identifier of the application programming interfaces for which the policy applies, an indicator and a type of malicious act which is performed when the indicator is set; and responsive to a determination that the set of policies for calls to application programming interfaces does not include the policy for calls to the application programming interface identified, the computer generating the policy for calls to the application programming interface identified and adding the generated policy to the set of policies for calls to application programming interfaces.