dmk-intent-vocabulary
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes crypto wallet and signing operations tied to Ledger hardware: e.g., get crypto addresses (signerEth.getAddress), sign transactions (signerEth.signTransaction — "sign and broadcast" phrasing), sign typed data (signerEth.signTypedData), sign delegation authorizations (signerEth.signDelegationAuthorization), raw APDU send for device commands, and full device session/connection management. These are specific, purpose-built blockchain/wallet APIs that enable creating and authorizing on‑chain transactions (i.e., moving funds). This meets the "Crypto/Blockchain (Wallets, Swaps, Signing)" criterion for Direct Financial Execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata