TronScan Data Lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill queries the TronScan API for blockchain data such as transactions, transfers, contract events, and search terms, which may contain untrusted outsider-authored content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The configuration file api_config.json defines an external API endpoint base URL (https://apilist.tronscanapi.com) and scripts/utils.js uses axios with that base URL and an optional proxy (https://ts.bankofai.io) to fetch operational data at runtime, making them common/reputable unofficial operational dependencies.