import type { Check } from "../types.js";
/**
 * Toxic agent flows (OWASP MCP10, Context Injection & Over-Sharing).
 *
 * Rolls each tool's capabilities up to the server and flags the "lethal
 * trifecta": one server that can read private data, ingest untrusted content,
 * and send data to an external destination. That combination lets a prompt
 * injection hidden in ingested content coerce the agent into exfiltrating
 * private data with no code-level compromise. It is the pattern behind the
 * documented GitHub-MCP and email-agent incidents.
 */
export declare const toxicFlowCheck: Check;