/**
 * Basic taint analysis — tracks user input flowing into dangerous sinks.
 * Not a full AST/CFG analysis, but follows variable assignments through lines.
 */
export interface TaintFinding {
    source: {
        type: string;
        line: number;
        variable: string;
    };
    sink: {
        type: string;
        line: number;
        code: string;
    };
    chain: string[];
    severity: "critical" | "high" | "medium";
    description: string;
    fix: string;
}
export declare function analyzeTaint(code: string, language: string, filePath?: string): TaintFinding[];
export declare function formatTaintFindings(findings: TaintFinding[], format: "markdown" | "json"): string;