import type { Check } from "../types.js";
/**
 * Tool shadowing and name collision (OWASP MCP03 / MCP09).
 *
 * All tool descriptions share the model's context, so a tool can reach past
 * its own boundary in two ways: collide on a trusted tool's name to shadow it,
 * or instruct the agent to invoke it ahead of every other tool. (The other
 * half of tool poisoning, hidden imperative directives, is handled by the
 * tool-poisoning check.) Both signals here are objective and low-noise, and we
 * intentionally leave benign "use A for X, B for Y" routing guidance alone.
 */
export declare const toolShadowingCheck: Check;