/**
 * Excessive Agency Mutation - OWASP LLM08 (Excessive Agency)
 *
 * This mutation tests if the LLM can be manipulated into claiming or
 * attempting to perform unauthorized actions beyond its actual capabilities
 * or permissions.
 *
 * The attack targets scenarios where:
 * - LLM claims to have access/permissions it shouldn't have
 * - LLM agrees to perform actions outside its scope
 * - LLM doesn't properly validate authorization for claimed actions
 * - LLM grants itself elevated privileges in conversation
 *
 * Reference: OWASP LLM Top 10 2025 - LLM08 Excessive Agency
 */
import { type CvssScore } from '../severity';
import type { Mutation } from './index';
export type AgencyType = 'file_system' | 'network' | 'database' | 'admin' | 'api' | 'user_data' | 'system_control';
export interface ExcessiveAgencyOptions {
    /** Preferred agency type to test (random if not specified) */
    agencyType?: AgencyType;
    /** Whether to add authority prefix */
    addAuthority?: boolean;
}
export declare class ExcessiveAgencyMutation implements Mutation {
    readonly name = "excessive-agency";
    readonly description = "Tests if LLM claims or attempts unauthorized actions beyond its permissions (OWASP LLM08)";
    readonly severity: "critical";
    readonly cvssScore: CvssScore;
    /** OWASP category */
    readonly owaspCategory = "LLM08";
    private agencyType?;
    private addAuthority;
    constructor(options?: ExcessiveAgencyOptions);
    /**
     * Get a random item from an array
     */
    private random;
    /**
     * Get agency type
     */
    private getAgencyType;
    mutate(prompt: string): string;
}
//# sourceMappingURL=excessive-agency.d.ts.map