YouOS

YouOS — local-first personal email copilot that learns your writing style from Gmail, Google Docs, and WhatsApp exports, then drafts replies in your voice. U...

This package largely does what it claims, but take these precautions before installing: - Review the source before running 'pip install -e .' (that executes package install code locally). - Confirm you trust the repository: it will ingest sensitive data (Gmail, Docs, WhatsApp) into a local SQLite DB. - Keep model.fallback set to 'none' if you want strictly local operation; enabling external fallback can send content to third-party model providers. - Inspect the launchd install scripts and bookmarklet code before running/ installing them—they enable background jobs and inject UI elements into Gmail when activated. - Ensure the gog CLI you authenticate is the intended account and that you understand what scope/permissions gog grants. If you want stronger assurance, run the app in an isolated environment (dedicated user/VM) and audit outgoing network activity while testing.

Type: OpenClaw Skill Name: youos Version: 0.1.18 The skill is a sophisticated local-first email copilot that ingests user data via the gog CLI and drafts replies using local models or an optional Claude CLI fallback. The implementation is highly professional and includes multiple security-conscious features such as PBKDF2-hashed PIN authentication (app/core/auth.py), rate limiting, and instance path validation (app/core/data_safety.py). While the application utilizes high-privilege capabilities like launchd persistence and subprocess execution (app/generation/service.py), these are clearly aligned with its stated purpose and are transparently documented. No evidence of malicious intent or unauthorized data exfiltration was found.