/** * Cross-Capability Security Assessor Module * Tests interactions between tools, resources, and prompts for security vulnerabilities * * Tests include: * - Tool->Resource access patterns (can a tool expose unauthorized resources?) * - Prompt->Tool interaction (can a prompt trigger dangerous tool calls?) * - Resource->Tool data flow (is sensitive resource data passed to tools?) * - Privilege escalation across capabilities */ import { CrossCapabilitySecurityAssessment } from "../../../lib/assessmentTypes.js"; import { BaseAssessor } from "./BaseAssessor.js"; import { AssessmentContext } from "../AssessmentOrchestrator.js"; export declare class CrossCapabilitySecurityAssessor extends BaseAssessor { assess(context: AssessmentContext): Promise; /** * Test if tools can access resources in unauthorized ways */ private testToolResourceAccess; /** * Test if prompts could trigger dangerous tool calls */ private testPromptToolInteraction; /** * Test if resource data could be passed to tools in unsafe ways */ private testResourceToolDataFlow; /** * Extract sensitive field types from resource metadata */ private extractSensitiveFields; /** * Determine exfiltration method from tool characteristics */ private determineExfiltrationMethod; /** * Test for privilege escalation paths */ private testPrivilegeEscalation; private toolHasPathParameter; private toolHasContentParameter; private promptCouldTriggerTool; private determineCrossCapabilityStatus; private generateExplanation; private generateRecommendations; } //# sourceMappingURL=CrossCapabilitySecurityAssessor.d.ts.map