/**
 * Prompt-injection / tool-poisoning heuristics for text found in tool,
 * prompt, and resource descriptions (and server instructions).
 *
 * MCP tool descriptions are fed verbatim into the model's context, so
 * imperative or hidden instructions there are an attack vector ("tool
 * poisoning"). We flag imperative-manipulation phrasing and hidden content.
 */
export interface InjectionSignal {
    readonly rule: string;
    readonly detail: string;
    readonly evidence: string;
}
export declare function detectInjection(text: string | undefined): InjectionSignal[];