canton-core-concepts

Warn

Audited by Snyk on Jun 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill describes a blockchain-style ledger with token templates and the Ledger API, mentions submitting commands to validators to create/archive contracts (the mechanism for transfers), and references external signing (wallet-like) and Canton Coin traffic. The provided AI prompt explicitly asks the agent to trace a two-party token transfer end-to-end (who submits, who builds views, ordering, confirmations, where the resulting contract is stored). These are specific blockchain/crypto transaction primitives (Ledger API, signing/workflow) that enable executing on-ledger transfers rather than being generic tooling. Therefore it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 11:15 AM
Issues
1
Security Audit — snyk — canton-core-concepts