canton-language-bindings
Warn
Audited by Snyk on Jun 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly generates type-safe client bindings intended to build CreateCommand and ExerciseCommand objects and submit them via the Ledger API or JSON API. Those commands are direct ledger transactions (i.e., submit-and-wait / command submission) that can modify ledger state and thus perform direct execution on an asset/contract ledger. This is not a generic browser or general-HTTP helper; it is explicitly defined to construct and send ledger transactions. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata