/**
 * Tier 2 LLM Security Judge
 *
 * Evaluates SKILL.md content for malicious INTENT using LLM analysis.
 * Catches what Tier 1 regex patterns miss: social engineering, obfuscated intent,
 * scope inflation, multi-step attack chains, and chained skill attacks.
 *
 * Uses the LLM provider abstraction (not direct Anthropic SDK) for multi-provider support.
 * Respects consent gate — never makes API calls without explicit user permission.
 *
 * @since v1.0.268
 */
export interface SecurityThreat {
    category: string;
    severity: 'critical' | 'high' | 'medium';
    description: string;
    evidence: string;
    line?: number;
}
export interface SecurityJudgeResult {
    verdict: 'PASS' | 'CONCERNS' | 'FAIL';
    score: number;
    summary: string;
    threats: SecurityThreat[];
    mitigations: string[];
    duration_ms: number;
}
interface SecurityJudgeOptions {
    projectRoot?: string;
    model?: string;
    timeout_ms?: number;
}
export declare class SecurityJudge {
    private projectRoot;
    private model?;
    private timeout_ms;
    constructor(options?: SecurityJudgeOptions);
    judge(skillContent: string): Promise<SecurityJudgeResult>;
    private getProvider;
    private loadSecurityJudgeConfig;
    private createSecurityProvider;
    private fallbackResult;
    private normalizeVerdict;
    private normalizeSeverity;
}
export {};
//# sourceMappingURL=security-judge.d.ts.map