Security checks across malware telemetry and agentic risk
YouOS appears to be a real local email-copilot app, but some default and fallback paths can send private email or notes to Claude despite strong local-only messaging.
Install only after reviewing the source and settings. For strict local use, set review.draft_model to local and model.fallback to none before drafting, avoid enabling nightly/service mode unless you want background processing, keep the server bound to 127.0.0.1, and configure a PIN/token allowlist before using the web UI or browser extension.
try:
venv_python = Path(__file__).resolve().parents[3] / ".venv" / "bin" / "python3"
script = Path(__file__).resolve().parents[3] / "scripts" / "nightly_pipeline.py"
subprocess.run([str(venv_python), str(script), "--autoresearch-only"], timeout=7200)
except Exception:
pass"JSON array:"
)
try:
result = subprocess.run(
["claude", "--print", "-p", prompt],
capture_output=True,
text=True,"""Commit config changes for a kept autoresearch improvement."""
msg = f"autoresearch: keep {surface_name} {old_value} → {new_value} (composite {baseline_composite:.4f} → {candidate_composite:.4f})"
try:
subprocess.run(
["git", "add", "configs/retrieval/defaults.yaml", "configs/prompts.yaml"],
capture_output=True,
timeout=10,timeout=10,
cwd=ROOT_DIR,
)
subprocess.run(
["git", "commit", "-m", msg],
capture_output=True,
timeout=10,tag_name = f"autoresearch-{timestamp}"
tag_msg = f"composite {baseline_composite:.4f} → {final_composite:.4f}, {improvements_kept} improvements"
try:
subprocess.run(
["git", "tag", tag_name, "-m", tag_msg],
capture_output=True,
timeout=10,# Try to set up cron
try:
if shutil.which("openclaw"):
subprocess.run(
[
"openclaw",
"cron",VirusTotal engine telemetry is currently stale for this artifact.