ledger-dmk-implementation

Warn

Audited by Snyk on Jun 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). This skill is explicitly a Ledger hardware signing and device-management flow for blockchains. Step 5 defines chain-specific signer builders (e.g., SignerEthBuilder, signTransaction, signPsbt, Solana transaction bytes) and returns signed outputs. It includes explicit crypto-wallet operations (derivation paths, PSBT signing, typed-data signing, Clear Signing) and device actions that enable secure channels and app installs. These are concrete, purpose-built APIs to produce cryptographic signatures that authorize on-chain transfers — i.e., direct execution authority over crypto funds (even though human approval on-device is required).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 12, 2026, 08:15 PM
Issues
1
Security Audit — snyk — ledger-dmk-implementation