/**
 * Command injection detection and dangerous command blocking.
 *
 * Enhances the basic checkShellSafety in prompt/safety.ts with deeper analysis:
 * - Shell metacharacter injection in arguments
 * - Dangerous command prefixes (destructive ops, credential exfiltration)
 * - Pipe-to-interpreter patterns (curl|bash, wget|sh, etc.)
 * - Credential / secret harvesting attempts
 */
import type { CommandValidationResult } from './types.js';
/**
 * Validate a shell command against injection and dangerous-command patterns.
 *
 * Returns `{ allowed: false }` for critical/high severity issues.
 * Returns `{ allowed: true }` with a reason for medium severity (warning).
 */
export declare function validateCommand(command: string): CommandValidationResult;
/**
 * Extract a list of all matched warning/block reasons for audit logging.
 * Unlike `validateCommand`, this does not short-circuit on the first match.
 */
export declare function auditCommand(command: string): {
    severity: 'critical' | 'high' | 'medium';
    reason: string;
}[];