/**
 * `agentsmarket scan <SKILL.md>` — security scan before publishing.
 *
 * Checks for common attack patterns in AI agent skills:
 * - Prompt injection (override system instructions, ignore safety)
 * - Data exfiltration (hidden URLs, webhook posts, env var access)
 * - Hidden/obfuscated content (base64 blobs, eval/Function, encoded strings)
 * - Dangerous commands (rm -rf, curl|bash, fs access)
 * - Credential harvesting (API_KEY, SECRET, TOKEN patterns)
 *
 * Returns a 0-100 safety score. Exit code 0 if score >= 70 (publish).
 * Exit code 1 if score < 70 (warnings — review before publishing).
 *
 * Differentiation vs competitors:
 * - skills.sh / Agensi: third-party audits POST-publish (passive)
 * - Gen Digital Agent Trust Hub / Snyk ToxicSkills / Socket: external scanners
 *   for ONE marketplace (Composio/Smithery only)
 * - agentsmarket scan: marketplace-integrated PRE-publish gate, real-time,
 *   free, open source. Runs in CLI before skill hits the server.
 */
interface Finding {
    severity: 'low' | 'medium' | 'high' | 'critical';
    category: string;
    message: string;
    line?: number;
}
interface ScanResult {
    path: string;
    score: number;
    findings: Finding[];
    recommendation: 'publish' | 'review' | 'block';
}
export declare function scanContent(content: string, path: string): ScanResult;
export declare function scanCommand(filePath: string): Promise<void>;
export {};