🔒 Security & install details

Built for trust. Inspect before you install.

Yo Human connects to your local AI workflow, so you should never run it blind. The installer is plain, readable shell — you (or your AI assistant) can read every line before anything runs.

✅ Yo Human runs locally and only watches the projects/sessions you choose.

✅ Inspect first — download the installer, read it, then run it. We never ask you to blind-pipe a remote script.

✅ We never upload your source code, and never send secrets or file contents in notifications.

✅ Uninstall anytime — it's a few local files and config entries (listed below).

📦What Yo Human installs

Claude CodeClaude Desktop / Cowork

Claude Code: a local ~/.yohuman/ folder (your private channel + small shell scripts), and global notification hooks added to ~/.claude/settings.json so each session can buzz your phone. Opt-in two-way scripts for Approve/Reject.

Claude Desktop / Cowork: a local ~/.yohuman-cowork/ folder (a small Node plug-in), registered in the Claude app's claude_desktop_config.json (your original is backed up first).

⚙️What Yo Human does

✓Notices when Claude finishes, needs your approval, or hits an error
✓Sends a push to your paired phone (via the ntfy app) on your private channel
✓Lets you Approve / Reject from your phone, and applies your answer locally
✓Helps your AI sessions ask you for input, approval, or direction

🚫What Yo Human does NOT do

✕Does not upload your source code
✕Does not send .env secrets or file contents in notifications
✕Does not deploy code
✕Does not modify unrelated projects
✕Does not run destructive commands on its own
✕Does not silently install across your whole machine

🖥️What changes on your Mac (exact)

›Files created: ~/.yohuman/ (Code) or ~/.yohuman-cowork/ (Cowork)
›Config touched (Code): Yo Human hooks added to ~/.claude/settings.json, and a "Yo Human" section appended to ~/.claude/CLAUDE.md (for the "I'm away / I'm back" control)
›Config touched (Cowork): a yohuman entry added to claude_desktop_config.json (original backed up to .yohuman-backup)
›Background process: none by default. Only if you opt into two-way approvals does a small local listener start (you can turn it off anytime).
›Network calls: notifications to ntfy.sh/<your-channel> (the push service), plus anonymous setup/usage events. No code or file contents are ever sent.

🧹How to uninstall

It's all local — you can remove it by hand, or just tell your AI "remove Yo Human" and it can do these steps (everything is readable):

Claude Code:

# turn off two-way first (if you enabled it)
bash ~/.yohuman/yohuman-approve-off.sh 2>/dev/null

# remove the Yo Human files
rm -rf ~/.yohuman

# then remove the Yo Human hooks from ~/.claude/settings.json
# (delete the PermissionRequest / Notification / Stop / StopFailure entries),
# and the "Yo Human" section from ~/.claude/CLAUDE.md. Restart Claude Code.

Claude Desktop / Cowork:

# restore your original Claude config (or remove the "yohuman" entry)
cp "$HOME/Library/Application Support/Claude/claude_desktop_config.json.yohuman-backup" \
   "$HOME/Library/Application Support/Claude/claude_desktop_config.json"

# remove the plug-in files
rm -rf ~/.yohuman-cowork

# then fully quit and reopen the Claude app.

Finally, open the ntfy app on your phone and unsubscribe from your channel. That's everything — Yo Human leaves nothing else behind.

🔎Inspect the source & verify

The installer is published as source-available code — read it, run it for your own use, but no redistribution or derivative works (see the license in the repo):

github.com/GITFischerAI/yohuman-install

Read the raw scripts directly: install.sh (Claude Code) · cowork-install.sh (Cowork)

Verify your download against these SHA-256 checksums (shasum -a 256 yohuman-install.sh):

install.sh         455a264e2ccde7dd7ab74d6c5715aeeb6fd1bece134db7b101b3696c9bc1fb76
cowork-install.sh  0ddf917cdc36dbd70ecfb170223b7a9bd9c230c2dfbfc8e4aee0f90ea70fe5b7
yohuman-mcp.mjs    8ed2d58d2a52c13c67545d28f41a40da9fc299d3c0c2cf1de5422c2a82fc628b