Supply-chain security issue
The CLI Apps feature downloads remote registries from hkuds.github.io, then uses registry-controlled package names and install metadata to run pip/npm/uv/brew installation commands.
Relevant code:
nanobot/apps/cli/service.py:26-33nanobot/apps/cli/service.py:809-864nanobot/apps/cli/service.py:1060
Impact
A compromised registry, GitHub account, CDN, or package can cause arbitrary code execution when a user installs or updates a CLI app. Registry metadata is not signed and package versions are not hash-pinned.
Suggested fix
Require explicit confirmation showing the exact package and command, pin versions/hashes, verify signed registry metadata, and make updates opt-in rather than silently trusting refreshed catalog data.
Supply-chain security issue
The CLI Apps feature downloads remote registries from
hkuds.github.io, then uses registry-controlled package names and install metadata to run pip/npm/uv/brew installation commands.Relevant code:
nanobot/apps/cli/service.py:26-33nanobot/apps/cli/service.py:809-864nanobot/apps/cli/service.py:1060Impact
A compromised registry, GitHub account, CDN, or package can cause arbitrary code execution when a user installs or updates a CLI app. Registry metadata is not signed and package versions are not hash-pinned.
Suggested fix
Require explicit confirmation showing the exact package and command, pin versions/hashes, verify signed registry metadata, and make updates opt-in rather than silently trusting refreshed catalog data.