/**
 * Indirect Prompt Injection Scanner
 *
 * Detects instruction-like content hidden in text that's supposed to be data
 * (RAG documents, tool outputs, emails, web pages, database records).
 * Unlike direct injection where the user sends malicious input, indirect
 * injection embeds instructions in DATA the LLM processes.
 */
import type { LayerResult } from './types.js';
/**
 * Scan text for indirect prompt injection heuristics.
 *
 * Returns a LayerResult with layer 'indirect', a combined score (capped at 1.0),
 * and flags prefixed with `indirect_injection:`.
 */
export declare function indirectInjectionScan(text: string): LayerResult;
//# sourceMappingURL=indirect.d.ts.map