ubon/dist/scanners/agent-settings-scanner.d.ts

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

import { Scanner, ScanOptions, ScanResult } from '../types';
/**
 * Agent-tooling scanner — inspects the dotfiles that AI coding tools ship
 * alongside a project: `.claude/` (settings, hooks, agents, MCP), `.cursor/`
 * (rules, mcp.json), `.windsurf/`, `.aider*`, `CLAUDE.md`, `.cursorrules`,
 * `.windsurfrules`.
 *
 * Detections target the classes of mistake AI workflows produce routinely:
 * committed API keys, unquoted variable expansion in shell hooks, remote
 * piped-to-shell commands, prompt-injection markers in agent memory, and
 * raw secrets inside MCP server env blocks.
 */
export declare class AgentSettingsScanner implements Scanner {
    name: string;
    scan(options: ScanOptions): Promise<ScanResult[]>;
    private result;
    private readonly secretPatterns;
    private findSecretLines;
    private findMcpEnvSecrets;
    private readonly injectionMarkers;
    private findInjectionMarkers;
    private findUnknownCursorHookEvents;
    private cursorHookEventReplacement;
}
//# sourceMappingURL=agent-settings-scanner.d.ts.map