TronScan SR Governance

PassAudited by ClawScan on May 1, 2026.

Overview

This is a read-only TronScan governance query skill; the main things to notice are its reliance on an external MCP server and an optional API key for rate limits.

This skill appears proportionate for read-only TRON governance lookups. Before using it, make sure you trust the configured TronScan MCP server, be mindful that queried addresses may be visible to the provider, and protect any optional API key you add for rate-limit relief.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Queries such as account vote lookups may reveal to the MCP provider which addresses or governance topics the user is interested in.

Why it was flagged

The skill is designed to use a remote MCP server, so user queries and supplied TRON addresses may be sent to that external service.

Skill content
mcp-server: https://mcp.tronscan.org/mcp
Recommendation

Use only if you trust the TronScan MCP endpoint, and avoid entering addresses you do not want associated with your query activity.

What this means

A TronScan API key may be used for the user's API quota or account-specific access depending on TronScan's key policy.

Why it was flagged

The API key is optional and purpose-aligned for rate-limit handling, but it is still a credential that would be stored in MCP configuration.

Skill content
apply for an API key, then add it to your MCP configuration and retry
Recommendation

Store any API key securely, use the minimum scope available, and remove or rotate it if no longer needed.