/** * Security Scanner — per-line category scanners * @module @skillsmith/core/security/scanner/SecurityScanner.scanners * * SMI-5359 Wave 4.2: extracted verbatim from SecurityScanner.ts to keep that * file under the 500-line CI gate before adding the code_execution and * obfuscated_directive detectors. These are pure functions of * (content, lineContexts) plus their module-level pattern arrays — they hold * no scanner instance state (no allowedDomains / blockedPatterns), so moving * them out is behaviour-preserving (guarded by the scoring + regression-guard * + ai-defence test suites). */ import type { SecurityFinding } from './types.js'; import type { LineContext } from './SecurityScanner.helpers.js'; import { looksLikePlaceholderSecret, shannonEntropy, scanPiiPatterns } from './SecurityScanner.pii.js'; export declare function scanSensitivePaths(content: string, lineContexts?: LineContext[]): SecurityFinding[]; export declare function scanSocialEngineering(content: string, lineContexts?: LineContext[]): SecurityFinding[]; export declare function scanPromptLeaking(content: string, lineContexts?: LineContext[]): SecurityFinding[]; export declare function scanDataExfiltration(content: string, lineContexts?: LineContext[]): SecurityFinding[]; export declare function scanPrivilegeEscalation(content: string, lineContexts?: LineContext[]): SecurityFinding[]; /** Implementation in SecurityScanner.compound.ts (SMI-5434 split). */ export { scanChmodFetchCompound } from './SecurityScanner.compound.js'; /** Implementation in SecurityScanner.pii.ts (SMI-5434 split). */ export { shannonEntropy, looksLikePlaceholderSecret, scanPiiPatterns }; //# sourceMappingURL=SecurityScanner.scanners.d.ts.map