export interface ShellThreat {
    rule: string;
    severity: "block" | "warn";
    detail: string;
}
export declare function checkShellThreats(command: string): ShellThreat[];
/** First blocking threat as a refusal message, or null when the command may run. */
export declare function shellThreatBlockMessage(command: string): string | null;