import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
export declare class AgentQueryReachCheck implements SecurityCheck {
    readonly id = "agent-query-reach";
    readonly name = "Agent Query Reach";
    readonly category = "AI & Agents";
    readonly description = "Flags agents that carry the standard General CRM topic or a Query Records action, which lets an injected prompt query any object the run-as user can read. This open-ended query is how SalesBleed (Zenity Labs, 2026) read Account data from a poisoned Web-to-Lead record.";
    readonly dependsOnCache: readonly ['agentInventory', 'agentAccess'];
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=AgentQueryReachCheck.d.ts.map