ubon
Version:
Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.
13 lines • 543 B
TypeScript
import { Rule } from '../types';
/**
* AI003: System prompt or model config exposed to client bundle.
*
* Flags `NEXT_PUBLIC_` (or `VITE_`, `PUBLIC_`) env vars whose name suggests
* a system prompt / model config, plus literal `system: '...'` blocks
* defined inside `'use client'` files. The system prompt is *not* a secret
* in the cryptographic sense, but exposing it lets users craft tailored
* jailbreaks and reveals proprietary business logic.
*/
declare const rule: Rule;
export default rule;
//# sourceMappingURL=AI003.d.ts.map