/** * Prompt-leakage detector — gap category `prompt-leakage`. * * Flags when a web page inadvertently exposes AI system-prompt / agent * instructions in its public surface: inline scripts, HTML comments, meta * tags, visible text, response headers, or error bodies. * * CONSERVATIVE design: every signal requires TWO corroborating markers * before generating a Gap, to keep the false-positive rate low. * A page that merely uses the word "AI" or "assistant" will NOT trip. * * Heuristics are derived from first principles — the structural telltale * shapes of an exposed instruction block. No third-party leaked-prompt * text or vendor identifiers were used. */ import type { Gap } from '../../schemas/gap-analysis.schema.js'; import type { Route } from '../../schemas/route-inventory.schema.js'; /** * Scan a captured page surface for signals that an AI system prompt or agent * instructions are exposed in its public surface. * * Accepts the `Route` shape from `route-inventory.schema.ts`, which now * includes the optional `headers` and `bodySnippet` fields. * * Returns an array of `Gap` objects with `category: 'prompt-leakage'`. * Returns an empty array when no signals are found. */ export declare function detectPromptLeakage(route: Pick): Gap[]; //# sourceMappingURL=prompt-leakage.d.ts.map