Scan Report
0 /100
ForgeX CLI
On-chain market making CLI for Solana — token launch, wallet management, trading, and volume bot
ForgeX CLI is a documentation-only skill (SKILL.md) with no scripts or code files. It describes a Solana CLI tool with no executable content, no credential access patterns, and no malicious indicators.
Safe to install
Approve for use. No executable code is present in this skill package.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | SKILL.md only; no script files present |
| Network | NONE | NONE | — | SKILL.md only; no network requests in skill itself |
| Shell | NONE | NONE | — | No shell scripts, subprocess calls, or exec patterns in skill |
| Environment | NONE | NONE | — | No env variable access patterns detected |
| Skill Invoke | NONE | NONE | — | No inter-skill invocation patterns |
| Clipboard | NONE | NONE | — | No clipboard access patterns |
| Browser | NONE | NONE | — | No browser or WebFetch patterns |
| Database | NONE | NONE | — | No database access patterns |
24 findings
Medium External URL 外部 URL
https://img.shields.io/badge/Sonic_SVM-purple?style=for-the-badge SKILL.md:11 Medium External URL 外部 URL
https://sonic.game SKILL.md:11 Medium External URL 外部 URL
https://img.shields.io/badge/Solana-9945FF?style=for-the-badge&logo=solana&logoColor=white SKILL.md:11 Medium External URL 外部 URL
https://solana.com SKILL.md:11 Medium External URL 外部 URL
https://img.shields.io/badge/Pump.fun-green?style=for-the-badge SKILL.md:11 Medium External URL 外部 URL
https://pump.fun SKILL.md:11 Medium External URL 外部 URL
https://img.shields.io/badge/Jito_Bundle-orange?style=for-the-badge SKILL.md:11 Medium External URL 外部 URL
https://jito.wtf SKILL.md:11 Medium External URL 外部 URL
https://img.shields.io/badge/OpenClaw_Native-blue?style=for-the-badge SKILL.md:11 Medium External URL 外部 URL
https://openclaw.ai SKILL.md:11 Medium External URL 外部 URL
https://img.shields.io/npm/v/forgex-cli?color=blue SKILL.md:15 Medium External URL 外部 URL
https://www.npmjs.com/package/forgex-cli SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/License-MIT-yellow.svg SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/Open%20Source-✓-brightgreen SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/Jito%20Bundle-✓-orange SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/Multi--wallet-✓-blue SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/Sonic%20SVM-✓-purple SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/OpenClaw%20Native-✓-blue SKILL.md:15 Medium External URL 外部 URL
https://img.shields.io/badge/On--chain%20Market%20Making-✓-green SKILL.md:15 Medium External URL 外部 URL
https://your-rpc-endpoint.com SKILL.md:58 Medium External URL 外部 URL
https://my-rpc.com SKILL.md:140 Medium External URL 外部 URL
https://twitter.com/mytoken SKILL.md:415 Medium External URL 外部 URL
https://mytoken.io SKILL.md:416 Medium External URL 外部 URL
https://twitter.com/SonicSVM SKILL.md:526 File Tree
1 files · 13.1 KB · 528 lines Markdown 1f · 528L
└─
SKILL.md
Markdown
Security Positives
✓ Pure documentation skill — only SKILL.md, no executable code
✓ No scripts, no subprocess calls, no shell execution
✓ No credential harvesting patterns or sensitive file access
✓ No obfuscation, no base64-encoded payloads
✓ No hidden HTML comments or embedded scripts
✓ No supply chain risks since no dependencies are bundled
✓ References external npm package (forgex-cli) for actual implementation — not bundled here
✓ Documented behavior is consistent with a standard CLI tool for on-chain trading