/**
 * OpenClaw plugin manifest scanner (v5.7, Unreleased).
 *
 * openclaw.plugin.json declares how an OpenClaw plugin activates and what it is
 * allowed to do. For an agent-memory plugin, that posture is security-relevant:
 * does it auto-capture conversations, can it ship them to an external LLM /
 * embedding API, does it store memory in a cloud vector DB, does it report
 * telemetry? These are surfaced as informational/medium CONTEXT (not
 * vulnerabilities). The manifest is a rare, OpenClaw-specific file, so these
 * checks never fire on ordinary npm packages.
 */
import type { Finding } from "./types.js";
export declare function scanOpenClawPlugin(dir: string): Finding[];
//# sourceMappingURL=openclaw-plugin-scanner.d.ts.map