/**
 * Security status checks for the sandbox
 */
/**
 * Security status report
 */
export interface SecurityStatus {
    /** Is the current process running as root? (dangerous!) */
    runningAsRoot: boolean;
    /** Current user */
    currentUser: string;
    /** Is sandbox user created? */
    sandboxUserExists: boolean;
    /** Is OpenClaw isolated to sandbox user? */
    isIsolated: boolean;
    /** Is guarded shell installed? */
    guardedShellInstalled: boolean;
    /** Exposed secrets found in environment */
    exposedSecrets: string[];
    /** Security warnings */
    warnings: string[];
    /** Critical security issues */
    critical: string[];
    /** Recommendations */
    recommendations: string[];
    /** Overall security level */
    level: 'secure' | 'partial' | 'unprotected' | 'critical';
}
/**
 * Check if an environment variable name looks like a secret
 */
export declare function isSecretEnvVar(name: string): boolean;
/**
 * Options for security status checks
 */
export interface SecurityCheckOptions {
    /** Environment to scan for secrets (defaults to process.env) */
    env?: Record<string, string | undefined>;
}
/**
 * Check full security status
 */
export declare function checkSecurityStatus(options?: SecurityCheckOptions): SecurityStatus;
//# sourceMappingURL=security.d.ts.map