/** * Chain Exploitation Analyzer (Issue #93, Challenge #6) * Detects multi-tool chained exploitation attacks * * Extracted from SecurityResponseAnalyzer.ts for modularity (Issue #179) */ import { CompatibilityCallToolResult } from "@modelcontextprotocol/sdk/types.js"; /** * Chain execution type classification (Issue #93, Challenge #6) */ export type ChainExecutionType = "VULNERABLE_EXECUTION" | "SAFE_VALIDATION" | "PARTIAL" | "UNKNOWN"; /** * Chain vulnerability categories (Issue #93, Challenge #6) */ export type ChainVulnerabilityCategory = "OUTPUT_INJECTION" | "RECURSIVE_CHAIN" | "ARBITRARY_TOOL_INVOCATION" | "TOOL_SHADOWING" | "MISSING_DEPTH_LIMIT" | "STATE_POISONING"; /** * Result of chain exploitation analysis (Issue #93, Challenge #6) * Detects multi-tool chained exploitation attacks */ export interface ChainExploitationAnalysis { vulnerable: boolean; safe: boolean; chainType: ChainExecutionType; vulnerabilityCategories: ChainVulnerabilityCategory[]; evidence: { vulnerablePatterns: string[]; safePatterns: string[]; vulnerableScore: number; safeScore: number; }; } /** * Analyzes responses for chain exploitation vulnerabilities * * Detects multi-tool chained exploitation attacks including: * - Arbitrary tool invocation without allowlist * - Output injection via {{output}} template substitution * - Recursive/circular chain execution (DoS potential) * - State poisoning between chain steps * - Tool shadowing in chains * - Missing depth/size limits */ export declare class ChainExploitationAnalyzer { private safeDetector; constructor(); /** * Analyze response for chain exploitation vulnerabilities (Issue #93, Challenge #6) * * @param response The tool response to analyze * @returns Analysis result with vulnerability status and evidence */ analyze(response: CompatibilityCallToolResult): ChainExploitationAnalysis; } //# sourceMappingURL=ChainExploitationAnalyzer.d.ts.map