ubon
Version:
Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.
14 lines • 474 B
TypeScript
import { Rule } from '../types';
/**
* AI002: Prompt-injection sink.
*
* Flags places where user-controlled input is concatenated/templated directly
* into an LLM prompt (system prompt, messages array, or `prompt:` field).
*
* The actual taint analysis lives in the AIScanner; this rule file only
* carries metadata + an allowlist of file types so the scanner can stay
* focused.
*/
declare const rule: Rule;
export default rule;
//# sourceMappingURL=AI002.d.ts.map