trongrid-transaction-info

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:18 PM UTC
• Version:
  1.0.2

Overview

This skill is a read-only TRON transaction lookup helper that uses a disclosed TronGrid MCP provider and does not include executable code or hidden persistence.

Install this only if you intend to use a TronGrid MCP server for TRON transaction lookups. Transaction hashes and addresses you query may be visible to that provider, even though they are generally public blockchain data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: In this markdown file, the only invocation example is "What happened in this transaction?" followed by a hash, but there are no explicit constraints, alternate trigger forms, or negative examples. The phrase itself is generic enough that it could match ordinary conversation about many kinds of transactions, making the activation scope ambiguous.

VirusTotal

54/54 vendors flagged this skill as clean.