ubon/dist/rules/ai/AI006.d.ts

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

import { Rule } from '../types';
/**
 * AI006: Tool / function-calling handler exposed without auth or allowlist.
 *
 * When an LLM can invoke `tools: [...]` and the handler is a Next.js route
 * / Hono endpoint / Express handler with no auth check, a prompt-injected
 * model becomes a confused deputy: it can read the filesystem, call DBs,
 * or send emails on behalf of any user.
 *
 * Detection in AIScanner: looks for `tools:` arrays whose `execute` /
 * handler reaches into `fs`, `child_process`, network fetches, or DB
 * clients without an upstream auth guard.
 */
declare const rule: Rule;
export default rule;
//# sourceMappingURL=AI006.d.ts.map