For some perspective, the one I linked only requests permission to read log files (to detect) while the Lookout one wants full network access (and interestingly enough no access to log files).
Presumably the one that requires network access tests for existence by attempting to connect to its local tcp port.
I'd be more comfortable installing an app that just scans the logs.
On the other hand, I have a rooted Android phone with LBE Privacy Guard installed, so I can install apps that require network privileges, and then simply deny them access to the Internet.