/** * Language-Aware Payload Generator * * Detects expected input language from parameter/tool names and generates * appropriate payloads for code execution vulnerability detection. * * Problem: Inspector sends shell commands like `whoami` to all tools, but * code execution tools expecting language-specific input (Python, JavaScript, SQL) * are not detected because they reject shell syntax as invalid. * * Solution: Detect target language from context and generate appropriate payloads. */ export type TargetLanguage = "python" | "javascript" | "sql" | "shell" | "generic"; export interface LanguagePayload { language: TargetLanguage; payload: string; evidence: RegExp; description: string; riskLevel: "HIGH" | "MEDIUM" | "LOW"; } export declare class LanguageAwarePayloadGenerator { /** * Detect target language from parameter name and tool context. * Uses heuristics based on common naming patterns. */ detectLanguage(paramName: string, toolName: string, toolDescription?: string): TargetLanguage; /** * Get payloads appropriate for the detected language. */ getPayloadsForLanguage(language: TargetLanguage): LanguagePayload[]; /** * Check if a parameter name suggests code execution context. */ isCodeExecutionParameter(paramName: string): boolean; private getPythonPayloads; private getJavaScriptPayloads; private getSqlPayloads; private getShellPayloads; private getGenericPayloads; } //# sourceMappingURL=LanguageAwarePayloadGenerator.d.ts.map