forgex-cli

Solana链上专业命令行工具，实现代币创建、交易、做市、钱包管理及资金转账，支持密码保护和JSON格式输出。

Security Scan

The skill's stated purpose (Solana on‑chain CLI) matches the instructions, but there are provenance gaps and several operational practices that increase risk (no source/homepage, global npm install of an unverified package, and instructions that handle private keys insecurely).

Purpose & Capability

The SKILL.md describes a Solana CLI that creates tokens, manages wallets, transfers funds, and runs market‑making bots — and the instructions show commands for each of those tasks. The declared requirements (none) are not unreasonable for an instruction-only wrapper that tells the user to install an external CLI.

Instruction Scope

The instructions direct the user/agent to generate, import, export, and use private keys (via --password and --private-key flags), read and write local files (CSV, JSON, image), and configure RPC endpoints and API keys. These actions involve highly sensitive secrets and file IO. The SKILL.md encourages passing passwords/keys on the command line (exposed to process lists and shell history) and importing private keys from plain CSV — practices that increase risk of accidental exfiltration. The file does not contain any steps that explicitly exfiltrate data, but an agent following these broad instructions could prompt the user to run commands that disclose secrets.

Install Mechanism

This is an instruction-only skill that instructs users to run `npm install -g forgex-cli`. There is no included install spec or verified homepage/source in the skill metadata. The SKILL.md implies an npm package and GitHub presence, but the skill metadata lists 'Source: unknown' and 'Homepage: none', creating a provenance gap: installing a global npm package from an unverifiable source is risky because it executes third‑party code on the user's machine.

Credentials

The skill declares no required environment variables or credentials, which aligns with being instruction-only. However, the documentation references setting a 'codexApiKey' via the tool's config and using RPC endpoints; the skill does not declare or explain how secrets should be stored. More importantly, the instructions rely on user-supplied private keys and passwords (passed on the CLI or in files) — sensitive data that should be handled with stricter guidance (hardware wallets, encrypted stores).

Persistence & Privilege

always:false and no special platform privileges are requested. The skill does not request persistent agent-level access or modify other skills. Autonomous model invocation is allowed (default), but that alone is not a disqualifier; combined with the other concerns it means the agent could propose actions involving funds unless the user intervenes.

What to consider before installing

Before installing or following these instructions: 1) Verify the npm package and its source — check the package page on npm and the linked GitHub repository, confirm the maintainer, read the package code and recent publish history. 2) Never paste real private keys or high-value passwords into command-line arguments or unencrypted CSVs; CLI args can be visible to other processes and stored in shell history. Prefer hardware wallets, ephemeral wallets with minimal funds, or encrypted wallet stores. 3) Test with --dry-run and on devnet/testnet and use a trusted RPC endpoint. 4) If you must install the CLI globally, inspect the package contents locally before running and prefer installing in an isolated environment (container or VM). 5) If you are uncomfortable auditing the package yourself, avoid installing it — a tool that handles token creation and transfers should come from a verifiable, reputable source.

Launch tokens. Bundle buy. Manage wallets — Just talk to your agent.

On-chain market making, from a single command line to your OpenClaw agent.<br/>No programming required.

---

⛓️ Supported Platforms

---

---

Overview · Quick Start · Configure · Command Reference · Examples

---

---

Why ForgeX?

Most on-chain workflows on Solana are painful:

• Too many manual steps. Copy-pasting addresses, switching tabs, signing transaction after transaction — every extra step is a chance to make a costly mistake.
• Repetitive confirmations waste hours. Manually confirming the same operations over and over drains time that should go toward strategy, not execution.
• Complex tools lock out non-developers. If you're not writing custom scripts, most market making tooling is simply inaccessible.

ForgeX packages the full workflow into a clean CLI. One command at a time.

---

Install

npm install -g forgex-cli

Requires Node.js >= 22.14.0.

Verify installation:

forgex --version

---

Quick Start (5 minutes)

Step 1 — Initialize config

forgex config init --rpc-url "https://your-rpc-endpoint.com" --network mainnet

Step 2 — Create a wallet group

forgex wallet create-group --name "my-group"
# Returns groupId — note it for subsequent commands

Step 3 — Generate wallets

forgex --password "your-password" wallet generate --group 1 --count 10

Step 4 — Fund your wallets

Distribute SOL from a source wallet to the group:

forgex --password "your-password" transfer out \
  --from "YourSourceWalletAddress" \
  --to-group 1 \
  --value 0.1

Step 5 — Launch a token

forgex --password "your-password" token create \
  --dex pump \
  --name "MyToken" \
  --symbol "MYT" \
  --image ./logo.png \
  --dev-wallet 1 \
  --dev-buy 0.5 \
  --dry-run   # remove --dry-run when ready to go live

Step 6 — Start the volume bot

forgex --password "your-password" tools volume \
  --group 1 \
  --token "TOKEN_MINT_ADDRESS" \
  --mode 1b1s \
  --amount 0.01 \
  --rounds 20 \
  --interval 10000

Tip: Always run with --dry-run first to simulate the operation before executing on-chain.

---

Command Reference

All commands accept --format json|table|minimal (default: json).

Commands involving private keys require --password before the subcommand name:

forgex --password "your-password" <command> [subcommand] [options]

---

config — Configuration

| Command | Description |

|---|---|

| forgex config init | Initialize config file |

| forgex config set <key> <value> | Set a config value |

| forgex config get [key] | View config values |

# Initialize with RPC endpoint
forgex config init --rpc-url "https://my-rpc.com" --network mainnet

# Set Codex API key for market data
forgex config set codexApiKey "your-api-key"

# Set default slippage (BPS)
forgex config set defaultSlippage 300

# View all config
forgex config get

---

wallet — Wallet Group Management

Create & manage groups

# Create a local wallet group
forgex wallet create-group --name "market-making-group"

# Create with optional remark
forgex wallet create-group --name "sniper-group" --remark "launch snipers"

# List all wallet groups
forgex wallet list-groups

# View group details (wallet addresses)
forgex wallet group-info --id 1

# Delete a group
forgex wallet delete-group --id 1 --force

Generate & import wallets

# Generate new wallets (max 100 per group)
forgex --password "pwd" wallet generate --group 1 --count 10

# Add an existing wallet by private key
forgex --password "pwd" wallet add --group 1 --private-key "Base58Key..." --note "main wallet"

# Remove a wallet from group
forgex --password "pwd" wallet remove --group 1 --address "WalletAddress..."

# Import from CSV (format: privateKey,note)
forgex --password "pwd" wallet import --group 1 --file ./wallets.csv

Backup & restore

# Export group as CSV
forgex --password "pwd" wallet export --group 1 --file ./backup.csv

# Export all groups as encrypted JSON
forgex --password "pwd" wallet export-group \
  --file ./all-groups.json \
  --encrypt \
  --password "file-encryption-password"

# Import all groups from JSON backup
forgex --password "pwd" wallet import-group \
  --file ./all-groups.json \
  --password "file-encryption-password"

Vanity addresses

# Generate address ending in "pump"
forgex wallet grind --suffix pump

# Generate 3 addresses with custom suffix, using 8 threads
forgex wallet grind --suffix pump --count 3 --threads 8

---

trade — Trading

All trade commands support --dry-run for simulation.

Buy

# Simulate buy (recommended before first run)
forgex --password "pwd" trade buy \
  --group 1 --token "TOKEN_CA" --amount 0.1 --dry-run

# Batch buy — all wallets in group buy the same amount
forgex --password "pwd" trade buy \
  --group 1 --token "TOKEN_CA" --amount 0.1 --slippage 300

Sell

# Sell all tokens
forgex --password "pwd" trade sell \
  --group 1 --token "TOKEN_CA" --amount all

# Sell 50%
forgex --password "pwd" trade sell \
  --group 1 --token "TOKEN_CA" --amount 50%

# Sell fixed token quantity
forgex --password "pwd" trade sell \
  --group 1 --token "TOKEN_CA" --amount 1000000

Batch (buy + sell in one bundle)

# Execute buy and sell in same Jito Bundle
forgex --password "pwd" trade batch \
  --group 1 --token "TOKEN_CA" \
  --type buyWithSell --mode 1b1s --amount 0.01

Modes: 1b1s (1 buy + 1 sell), 1b2s, 1b3s, 2b1s, 3b1s

Sniper

# Snipe with different amounts per wallet (amounts count must match wallet count)
forgex --password "pwd" trade sniper \
  --group 1 --token "TOKEN_CA" \
  --amounts "0.5,0.3,0.2" --slippage 500

---

tools — Market Making

All tools support --dry-run. Use --rounds to limit execution.

Turnover (wallet cycling)

Cycles tokens between two wallet groups via Jito Bundle — zero price impact.

# Simulate
forgex --password "pwd" tools turnover \
  --from-group 1 --to-group 2 --token "TOKEN_CA" --dry-run

# Run 5 turnover cycles
forgex --password "pwd" tools turnover \
  --from-group 1 --to-group 2 --token "TOKEN_CA" \
  --daemon --rounds 5 --interval 2000

# Turnover 50% of holdings
forgex --password "pwd" tools turnover \
  --from-group 1 --to-group 2 --token "TOKEN_CA" \
  --amount 50%

Volume bot

Generates on-chain trading volume with zero net loss (buy + sell in same bundle).

# Simulate
forgex --password "pwd" tools volume \
  --group 1 --token "TOKEN_CA" --dry-run

# Run 20 rounds, every 10 seconds
forgex --password "pwd" tools volume \
  --group 1 --token "TOKEN_CA" \
  --mode 1b1s --amount 0.01 \
  --daemon --rounds 20 --interval 10000

Price robot

Automatically moves price toward a target by buying (up) or selling (down).

# Simulate price push
forgex --password "pwd" tools robot-price \
  --group 1 --token "TOKEN_CA" \
  --direction up --target-price 0.001 --dry-run

# Push price up, max spend 5 SOL
forgex --password "pwd" tools robot-price \
  --group 1 --token "TOKEN_CA" \
  --direction up --target-price 0.001 \
  --amount 0.05 --max-cost 5 --interval 3000

Options: --direction up|down, --target-price <sol>, --amount <sol>, --max-cost <sol>, --interval <ms>

---

transfer — Fund Management

All transfer commands support --dry-run.

Collect (many → one)

# Collect all SOL from group into one wallet
forgex --password "pwd" transfer in \
  --to "MainWalletAddress" --from-group 1 --amount all

# Collect from only the first 5 wallets
forgex --password "pwd" transfer in \
  --to "MainWalletAddress" --from-group 1 --amount all --count 5

# Keep 0.01 SOL in each wallet, collect the rest
forgex --password "pwd" transfer in \
  --to "MainWalletAddress" --from-group 1 \
  --amount reserve --value 0.01

# Collect tokens instead of SOL
forgex --password "pwd" transfer in \
  --to "MainWalletAddress" --from-group 1 \
  --token "TOKEN_CA" --amount all

Distribute (one → many)

--from address must belong to a wallet group (private key required for signing).

# Send 0.1 SOL to each wallet in group
forgex --password "pwd" transfer out \
  --from "SourceAddress" --to-group 1 --value 0.1

# Distribute to only the first 10 wallets
forgex --password "pwd" transfer out \
  --from "SourceAddress" --to-group 1 --value 0.1 --count 10

# Random distribution between 0.05 and 0.15 SOL
forgex --password "pwd" transfer out \
  --from "SourceAddress" --to-group 1 \
  --amount random --value 0.05 --max 0.15

Many-to-many (wallet[i] → wallet[i])

# Transfer all from group 1 wallets to matching group 2 wallets
forgex --password "pwd" transfer many-to-many \
  --from-group 1 --to-group 2 --amount all

# Fixed amount per pair
forgex --password "pwd" transfer many-to-many \
  --from-group 1 --to-group 2 --amount fixed --value 0.1

---

token — Token Operations

Supports --dry-run for simulation.

Create & launch token

# Simulate token creation
forgex --password "pwd" token create \
  --dex pump \
  --name "MyToken" --symbol "MTK" \
  --image ./logo.png \
  --description "My token" \
  --dry-run

# Launch with dev buy + snipers in same block (T0 bundle)
forgex --password "pwd" token create \
  --dex pump \
  --name "MyToken" --symbol "MTK" \
  --image ./logo.png \
  --twitter "https://twitter.com/mytoken" \
  --website "https://mytoken.io" \
  --dev-wallet 1 --dev-buy 2.0 \
  --snipers 2 --sniper-amounts "0.5,0.3,0.2" \
  --bundle-time T0

Platforms: pump (Pump.fun), launchlab

Bundle time: T0 (dev buy + snipers same block), T1_T5 (snipers 1-5 blocks after dev)

Query token

# Token info (price, name, dex)
forgex token info --ca "TOKEN_CA"

# Liquidity pool info
forgex token pool --ca "TOKEN_CA"

---

query — Data Queries

# SOL balance
forgex query balance --address "WalletAddress"

# Token balance
forgex query balance --address "WalletAddress" --token "TOKEN_CA"

# Token price
forgex query price --token "TOKEN_CA"

# Candlestick data (intervals: 1m, 5m, 15m, 1h, 4h, 1d)
forgex query kline --token "TOKEN_CA" --interval 5m --count 50

# Transaction history for a group
forgex query transactions --group 1 --token "TOKEN_CA"

# Holdings and PnL across a group
forgex query monitor --group 1 --token "TOKEN_CA"

---

Slippage Reference

| BPS | Percentage | Recommended for |

|---|---|---|

| 100 | 1% | Turnover trades |

| 300 | 3% | Normal buy/sell |

| 500 | 5% | Sniping / fast entries |

| 1000 | 10% | High volatility tokens |

| 2000 | 20% | Extreme conditions |

---

Demo

<!-- 📹 30-second demo video — coming soon -->

---

Workflow Examples

Token Launch in 3 commands

# 1. Create wallets
forgex --password "pwd" wallet generate --group 1 --count 5

# 2. Fund them
forgex --password "pwd" transfer out --from "MainWallet" --to-group 1 --value 0.5

# 3. Launch token with dev buy + snipers
forgex --password "pwd" token create \
  --dex pump --name "MyToken" --symbol "MTK" \
  --image ./logo.png \
  --dev-wallet 1 --dev-buy 1.0 \
  --snipers 1 --sniper-amounts "0.3,0.2,0.1,0.1,0.1" \
  --bundle-time T0

Run the volume bot

forgex --password "pwd" tools volume \
  --group 1 --token "TOKEN_CA" \
  --mode 1b1s --amount 0.01 \
  --rounds 30 --interval 10000

Collect funds back to main wallet

forgex --password "pwd" trade sell --group 1 --token "TOKEN_CA" --amount all
forgex --password "pwd" transfer in --to "MainWallet" --from-group 1 --amount all

---

Links

• Twitter: @SonicSVM
• npm: forgex-cli
• Sonic SVM: sonic.game