dmk-business-logic

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a conceptual guide for developers, explaining the rationale behind Ledger DMK design decisions. It includes educational content on security features like Clear Signing to prevent blind signing attacks.- [EXTERNAL_DOWNLOADS]: Mentions the @ledgerhq/context-module Node.js package. This is an official package from the vendor required for fetching transaction metadata for clear signing on Ethereum.- [DATA_EXFILTRATION]: Describes the implementation of a Secure Channel using wss://manager.live.ledger.com. This is an official Ledger service endpoint used for mutual authentication and device management tasks (like genuine checks and app management) through an encrypted tunnel.- [CREDENTIALS_UNSAFE]: Contains code examples using a placeholder string 'your-partner-token' for the originToken parameter. No actual secrets or API keys are exposed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 08:15 PM
Security Audit — agent-trust-hub — dmk-business-logic