import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
export declare class AgentOutboundActionsCheck implements SecurityCheck {
    readonly id = "agent-outbound-actions";
    readonly name = "Agent Outbound Actions";
    readonly category = "AI & Agents";
    readonly description = "Flags agent actions that send data out of the org (Slack messages, email, external services and MCP tools, including Flow actions whose flow sends email or calls an external service) without requiring user confirmation. An injected prompt can use them to carry data out: PipeLeak (Capsule Security, 2026) used the email action, and SalesBleed posted through Slack.";
    readonly dependsOnCache: readonly ['agentInventory', 'agentAccess'];
    run(ctx: AuditContext): Promise<CheckResult>;
    private outboundFlows;
    private inspectFlow;
}
//# sourceMappingURL=AgentOutboundActionsCheck.d.ts.map