ledger-signing

Warn

Audited by Snyk on Mar 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). This skill is explicitly designed to perform crypto wallet signing: it provides direct USB/HID runtime signing flows using the ledgerblue library, supports transaction and EIP-712 typed_data payloads, and includes scripts and configuration to run live transaction/message signing on a Ledger device. Those are specific, wallet-level crypto signing capabilities (i.e., direct blockchain transaction signing), not generic tooling, so it enables direct financial execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 21, 2026, 02:44 AM
Issues
1