export declare function defaultSkillScanPaths(): string[];
export type SecurityCommandRunner = (command: string, args: string[], cwd: string) => {
    stdout: string;
    stderr: string;
    status: number;
    error?: string;
};
export interface PackageAuditFinding {
    source: 'npm-audit' | 'pnpm-audit' | 'yarn-audit' | 'osv';
    packageManager: 'npm' | 'pnpm' | 'yarn' | 'osv';
    packageName: string;
    severity: string;
    title: string;
    id: string;
    dependencyPath?: string;
    fixAvailable: boolean;
    direct: boolean;
    workspacePath: string;
}
export interface PackageAuditWarning {
    type: 'missing-lockfile' | 'multiple-lockfiles' | 'command-missing' | 'command-failed' | 'osv-unavailable' | 'empty-project';
    message: string;
    workspacePath?: string;
}
export interface PackageAuditResult {
    findings: PackageAuditFinding[];
    warnings: PackageAuditWarning[];
    scannedTargets: Array<{
        packageManager: 'npm' | 'pnpm' | 'yarn';
        workspacePath: string;
    }>;
    osvScanned: boolean;
}
export interface SkillAuditIssue {
    type: 'script-file' | 'command-exec' | 'network-request' | 'download-remote' | 'tool-instruction';
    filePath: string;
    signal: string;
    sample?: string;
}
export interface SkillAuditFinding {
    skillName: string;
    sourcePath: string;
    issues: SkillAuditIssue[];
}
export interface SkillAuditWarning {
    type: 'empty-scan-paths' | 'missing-path';
    message: string;
    path?: string;
}
export interface SkillAuditResult {
    configuredPaths: string[];
    scannedPaths: string[];
    warnings: SkillAuditWarning[];
    findings: SkillAuditFinding[];
    scannedSkills: number;
}
export declare function auditPackageSecurity(projectRoot: string, runner?: SecurityCommandRunner): PackageAuditResult;
export declare function auditSkillSecurity(projectRoot: string): SkillAuditResult;
//# sourceMappingURL=security-audit.d.ts.map