Skip to content

Security

How JIMMY keeps your PC safe

JIMMY can reach your files, browser and terminal, so the rules for what it may do are written into its code, not left to the AI. Here’s how they work.

Last updated 25 October 2026

Who can command JIMMY

Only you. JIMMY reads commands from your own WhatsApp self-chat. Messages from anyone else are dropped without a reply, so other people can’t give it instructions even if they message you.

When you ask JIMMY to read or summarise someone else’s chat, a file or a web page, that text is passed to the AI as quoted data. It never reaches the part of JIMMY that runs commands, so instructions hidden inside it are ignored.

When JIMMY asks first

Whether JIMMY needs your OK is decided in its code, so a trick message can’t talk it out of asking.

  • Just does it: reading inside your allowed folders, looking things up, read-only checks.
  • Waits for YES: running new scripts, changing files outside its workspace, opening apps. It shows you exactly what it will run first.
  • Needs YES and your PIN: messaging other people, deleting files, installing software, sending email or data to websites.

JIMMY only works inside the folders you allow. Every path is checked before it’s used, and tricks like ..\..\, network paths and device names are refused. Files that look like keys or passwords (.ssh, .env, id_rsa and similar) can’t be sent at all.

Schedules and skills

A scheduled task runs on its own only for steps that need no approval. If a step would message someone, delete something or change things, JIMMY asks you at the moment it runs. No approval is stored for later.

When JIMMY writes a script that works, it saves it as a skill. You can list, read and delete skills from WhatsApp (show my skills, forget skill <name>) or the dashboard. A saved skill runs without asking only when all of this is true:

  • you approved this exact code before, and it hasn’t changed since;
  • it only reads, and JIMMY’s own check of the code agrees;
  • everything it touches is inside your allowed folders;
  • it isn’t something that needs your PIN. Those always ask.

What JIMMY never does

Formatting disks, editing the registry, turning off Defender or the firewall, and reading saved passwords are blocked, whatever the request says.

What leaves your PC

  • Simple commands are understood on your PC, without any AI. For everything else, only the text of your request goes to the AI you picked.
  • Before it goes, JIMMY removes passwords, API keys, tokens, private keys and card numbers from it.
  • You choose the AI: the free Antigravity CLI, your own API key, or a model on your own PC through Ollama or LM Studio, so nothing leaves your machine at all.
  • I never receive your files, chats, memory or activity. The privacy policy lists everything that leaves your PC.

On your PC

  • Your WhatsApp session is stored encrypted on disk.
  • The dashboard only answers on your own PC (127.0.0.1), and checks every request so other websites you visit can’t use it.
  • Every action JIMMY takes is written to an activity log you can read on the dashboard.

Installer and updates

The installer isn’t code-signed yet, so Windows SmartScreen may warn you the first time. Choose More info → Run anyway, and only download JIMMY from this website. Once it’s installed, every update is checked against JIMMY’s own signature before it’s applied, and installed only when you agree.

Stop and undo

  • Send /stop and JIMMY halts everything and locks itself until you unlock it on your PC.
  • Before JIMMY changes or deletes a file, it keeps a copy. Send undo to put the last change back; copies are kept for 30 days.

WhatsApp

JIMMY links to WhatsApp the same way WhatsApp Web does, but it isn’t an official WhatsApp client, so your WhatsApp account could be restricted or banned. JIMMY isn’t affiliated with WhatsApp or Meta. The terms explain this in full.

Report a problem

Found a security issue? Please email pykalki@gmail.com rather than posting it publicly, and I’ll reply personally.