
Research
/Security News
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
@rhobot-dev/rho
Advanced tools
An always-on personal AI operator that:
Runs on macOS, Linux, and Android (plus iPhone/iPad via SSH).
Built on pi coding agent.

Most AI tools are stateless chat tabs. rho is built for ongoing operation.
Prerequisites: Node.js 18+, tmux, git
npm install -g @rhobot-dev/rho
rho init && rho sync
rho login && rho start
rho
That gives you:
~/.rho/Run these after install:
rho status # daemon + module health
/rho status # heartbeat status (inside session)
/rho now # trigger immediate check-in
/brain # open memory viewer
/vault inbox # see captured knowledge items
rho includes a browser workspace for day-to-day operation:
/brain entries)~/.rho/init.toml)/reviewweb/*.ts, browser runtime in web/public/js/*.js (no frontend bundler/transpile pipeline).sessions_changed UI events; client updates immediately.mtime to avoid unnecessary re-reads.rho web
rho web --port 4000
rho web --open
Then open http://localhost:3141 (or your host IP).
| Project | Web experience emphasis |
|---|---|
| rho | Built-in operator workspace with stronger memory observability and a lightweight no-build stack (chat, learned-memory inspection/editing, tasks, config, review) |
| OpenClaw | Strong Gateway Control UI + WebChat control plane |
| nanobot | README primarily emphasizes CLI + channel gateway flows |
pi install npm:@rhobot-dev/rho
rho init && rho sync
rho login && rho start
git clone https://github.com/mikeyobrien/rho.git ~/.rho/project
cd ~/.rho/project && ./install.sh
The installer checks missing dependencies and supports NixOS.
Install Termux and Termux:API from F-Droid, then:
curl -fsSL https://rhobot.dev/install | bash
Run rho on a server/VPS/home machine, then connect from iOS using Termius (or any SSH client).
Guide: docs/iphone-setup.md
| Use case | What rho does |
|---|---|
| Daily operator loop | Keeps reminders/tasks alive between sessions and runs periodic check-ins |
| Memory-backed coding copilot | Stores durable behavior/preferences/learnings, and lets you inspect/edit that learned state directly |
| Inbox agent | Gets name@rhobot.dev, polls, reads, and replies to email |
| Telegram-controlled agent | Receives prompts from Telegram and responds in-thread |
| Browser control panel | Web UI for chat, memory, tasks, and config |
If you use the native Android wrapper (mobile/rho-android) to run rho-web, background behavior has two explicit modes:
Use Live Mode when stream continuity matters (for example, long active responses while the phone is locked). Without it, WebView background limits can cause disconnect/orphan behavior around the default orphan window.
Tradeoffs:
GO LIVE / STOP LIVE).Baseline Live Mode reliability does not require Firebase credentials.
brain.jsonl)~/.rho/vault/)name@rhobot.devrho ... commands/rho, /brain, /vault, /skill, /telegram, /email~/.rho/brain/brain.jsonl)~/.rho/init.toml, ~/.rho/packages.toml)rho login via pi)No hosted rho memory backend required.
rho # start and attach
rho init # initialize ~/.rho config
rho sync # sync rho config to pi
rho doctor # health + config checks
rho login # authenticate providers
rho start # start background daemon
rho stop # stop daemon
rho status # daemon/module status
rho trigger # force heartbeat now
rho logs # recent heartbeat output
rho config # show effective config
rho calc "2 + 2 * 3" # quick arithmetic calculator
rho upgrade # update and resync
rho skills <args> # skills provider wrapper
Inside a session:
/rho status heartbeat state
/rho now immediate check-in
/rho interval 30m set check-in interval
/rho enable/disable toggle heartbeat
/bootstrap status bootstrap lifecycle state
/brain memory operations
/vault inbox captured vault items
/skill run pdd planning workflow
/skill run code-assist implementation workflow
| Platform | Status | Notes |
|---|---|---|
| Linux | Supported | Native install + daemon + web UI |
| macOS | Supported | Native install + daemon + web UI |
| Android (Termux) | Supported | Extra mobile capabilities via platform skills |
| iPhone/iPad | Supported (SSH client) | Run rho remotely, connect via SSH |
Project structure and internals are intentionally modular:
cli/ for command surface and daemon orchestrationextensions/ for runtime tools/modulesskills/ for portable markdown runbooksplatforms/ for platform-specific installs/capabilitiesweb/ for browser UI + RPC bridgeFor full tree + extension/skill details, see current README.md and docs/.
FAQs
AI agent with persistent memory, heartbeat check-ins, and a knowledge vault
The npm package @rhobot-dev/rho receives a total of 364 weekly downloads. As such, @rhobot-dev/rho popularity was classified as not popular.
We found that @rhobot-dev/rho demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.

Research
/Security News
We identified over 20 additional malicious extensions, along with over 20 related sleeper extensions, some of which have already been weaponized.