diff --git a/.github/cla-signers.json b/.github/cla-signers.json
index f9aaf5e6..18cadb06 100644
--- a/.github/cla-signers.json
+++ b/.github/cla-signers.json
@@ -167,9 +167,16 @@
       ],
       "signed_date": "2026-01-03",
       "cla_version": "1.0"
+    },
+    {
+      "name": "Aether-AGI-Operator",
+      "github_username": "goodluxiao2",
+      "emails": [
+        "goodluxiao@gmail.com"
+      ],
+      "signed_date": "2026-01-05",
+      "cla_version": "1.0"
     }
-
-
   ],
   "corporations": {
     "AI Venture Holdings LLC": {
@@ -187,4 +194,4 @@
       "emails": []
     }
   }
-}
+}
\ No newline at end of file
diff --git a/cortex/packages.py b/cortex/packages.py
index c32b5458..8c839473 100644
--- a/cortex/packages.py
+++ b/cortex/packages.py
@@ -8,6 +8,7 @@
 
 import re
 import subprocess
+import shlex
 from enum import Enum
 
 
@@ -439,7 +440,7 @@ def get_package_info(self, package_name: str) -> dict[str, str] | None:
         try:
             if self.pm_type == PackageManagerType.APT:
                 result = subprocess.run(
-                    ["apt-cache", "show", package_name], capture_output=True, text=True, timeout=10
+                    ["apt-cache", "show", shlex.quote(package_name)], capture_output=True, text=True, timeout=10
                 )
                 if result.returncode == 0:
                     info = {}
@@ -452,7 +453,7 @@ def get_package_info(self, package_name: str) -> dict[str, str] | None:
             elif self.pm_type in (PackageManagerType.YUM, PackageManagerType.DNF):
                 pm_cmd = "yum" if self.pm_type == PackageManagerType.YUM else "dnf"
                 result = subprocess.run(
-                    [pm_cmd, "info", package_name], capture_output=True, text=True, timeout=10
+                    [pm_cmd, "info", shlex.quote(package_name)], capture_output=True, text=True, timeout=10
                 )
                 if result.returncode == 0:
                     info = {}