/** * Security command — Scan code, prompts, or files for security issues. * * Usage: * buff security scan — Scan inline text for issues * buff security scan --file — Scan a file for issues * buff security scan --stdin — Read input from stdin (pipe) * buff security scan --prompt — Only check for prompt injection * buff security scan --code — Only check for dangerous code patterns * buff security scan --pii — Only check for PII * buff security scan --generated — Mark input as AI-generated (lower severity) * buff security scan --json — Output results as JSON * buff security scan --strict — Fail on medium+ severity (default: high+) * * The scanner detects: * - PII (emails, API keys, tokens, SSNs, credit cards, phones) * - Prompt injection patterns (jailbreaks, prompt leaking, token smuggling) * - Dangerous code patterns (eval, exec, shell injection, SQL injection, etc.) */ import { Command } from 'commander'; import { BaseCommand } from './commands.js'; export declare class SecurityCommand extends BaseCommand { create(): Command; private runScan; } //# sourceMappingURL=security.d.ts.map