TronScan Data Lookup

SUSPICIOUS. The skill’s stated purpose is coherent and the npm install step is routine, but the default data flow through a Bank of AI proxy instead of official TronScan endpoints is disproportionate for a read-only blockchain lookup tool. With no code files to verify what is sent, whether keys are ever forwarded, or how the proxy behaves, this is a medium-risk trust and data-flow concern rather than confirmed malware.