P0 Systems

WarnAudited by ClawScan on May 10, 2026.

Overview

This skill is coherent with its crypto purpose, but it gives an agent broad ability to spend, trade, deploy tokens, and manage account keys without clear approval limits.

Install only if you intend to let an agent interact with a crypto trading/token-deployment service. Use a dedicated low-balance wallet and API key, require explicit confirmation for every financial or account-changing action, and verify P0 independently before registering or funding the account.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or overly autonomous agent action could spend funds, trade assets, or create public token deployments that may be difficult or impossible to reverse.

Why it was flagged

These documented endpoints let an agent deploy tokens, execute swaps, and spend credits or crypto through the P0 API.

Skill content
`POST /projects/{id}/deploy` ... `{"platform": "pump_fun", "initialBuySol": 0.01}` ... `POST /swap` ... `POST /credits/purchase`
Recommendation

Use only with explicit approval for every deploy, swap, purchase, and upgrade; set small balances, amount limits, slippage limits, and token allowlists.

What this means

If the agent or environment mishandles the key, it may have broad account authority, including creating or revoking keys and performing financial actions.

Why it was flagged

The same API key is documented as authenticating all endpoints, including account and API-key administration.

Skill content
All authenticated endpoints use `x-api-key: $P0_API_KEY` header ... `POST /api-keys → generate additional API key` ... `DELETE /api-keys/{id} → revoke a key`
Recommendation

Use a least-privilege or dedicated API key if available, keep balances low, rotate keys regularly, and do not expose this key to unrelated agent tasks.

What this means

Users may over-trust the agent to make profitable or safe trading/deployment decisions.

Why it was flagged

The wording frames speculative crypto activity as income and encourages reinvestment, which may understate financial risk.

Skill content
Deploy tokens on Solana. Trade on pump.fun & Jupiter. Earn creator fees. Pay your own rent. ... `Reinvest earned SOL into new deployments`
Recommendation

Treat the marketing and strategy text as promotional, not financial advice; review costs, losses, legal/regulatory issues, and market risk before use.

What this means

The main trust decision is whether the external P0 service and documentation are legitimate and safe for financial use.

Why it was flagged

There is no local package to audit, and provenance is limited to an unknown source plus an external service URL.

Skill content
Source: unknown ... Homepage: https://agents.p0.systems ... No install spec — this is an instruction-only skill.
Recommendation

Verify the provider, domain, terms, and API documentation independently before registering a wallet, setting an API key, or sending funds.