/**
 * createZipTraversalGuard – guards against path traversal & header spoofing in ZIPs.
 * EXPECTS: caller provides an iterator over entries with metadata (name, isSymlink, target?, from CEN & LFH).
 * Return non-empty array to flag.
 */
export type EntryMeta = {
    nameCEN: string;
    nameLFH: string;
    isSymlink?: boolean;
    linkTarget?: string;
};
export declare function createZipTraversalGuard(): {
    id: string;
    scan(entries: AsyncIterable<EntryMeta>): Promise<{
        rule: string;
        severity: "suspicious";
        msg: string;
    }[]>;
};