/**
 * Injection scanning for scheduled jobs.
 *
 * Two tiers:
 * - Create-time (`assertSafeCronPrompt`): strict patterns applied to the short,
 *   user-authored job prompt when a job is created or updated.
 * - Fire-time (`assertSafeCronContent`): injection-focused patterns applied to
 *   content assembled into the prompt at execution time — loaded skill files,
 *   pre-run script output, and context pulled from other jobs. These inputs can
 *   carry text the user never reviewed (e.g. fetched web content), so they are
 *   scanned on every run.
 */
/** Throws if a user-authored job prompt contains unsafe instruction-like text. */
export declare function assertSafeCronPrompt(prompt: string): void;
/**
 * Throws if content assembled into a scheduled job prompt at fire time
 * (skill files, script output, context from other jobs) looks like an
 * injection attempt. `source` names the offending input for the job log.
 */
export declare function assertSafeCronContent(text: string, source: string): void;
//# sourceMappingURL=prompt-scan.d.ts.map