ledger-dmk-implementation
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is explicitly a Ledger hardware signing and device-management flow for blockchains. Step 5 defines chain-specific signer builders (e.g., SignerEthBuilder, signTransaction, signPsbt, Solana transaction bytes) and returns signed outputs. It includes explicit crypto-wallet operations (derivation paths, PSBT signing, typed-data signing, Clear Signing) and device actions that enable secure channels and app installs. These are concrete, purpose-built APIs to produce cryptographic signatures that authorize on-chain transfers — i.e., direct execution authority over crypto funds (even though human approval on-device is required).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata