canton-core-concepts
Warn
Audited by Snyk on Jun 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill describes a blockchain-style ledger with token templates and the Ledger API, mentions submitting commands to validators to create/archive contracts (the mechanism for transfers), and references external signing (wallet-like) and Canton Coin traffic. The provided AI prompt explicitly asks the agent to trace a two-party token transfer end-to-end (who submits, who builds views, ordering, confirmations, where the resulting contract is stored). These are specific blockchain/crypto transaction primitives (Ledger API, signing/workflow) that enable executing on-ledger transfers rather than being generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata