jev-guard adds risk blocking to Claude Code
jev-guard uses the Jev engine to risk-score every tool call, blocking destructive actions like rm -rf and flagging prompt injections, with a setup of about five minutes.
It's getting f*cking dangerous: you gave Claude your Gmail, your Drive and a browser. Nobody is watching what it does with them One poisoned email. One shady web page. One skill you installed from GitHub without reading. That's all it takes for your agent to run rm -rf or ship your files somewhere you'll never see. Here's how to give it a bodyguard: 1. Install jev-guard: npm i -g jev-guard 2. Grab a key at http://console.typesafe.ai (Vercel AI Gateway and OpenRouter keys work too) 3. Run jev-guard key "your-key" 4. Run jev-guard install claude to wire it into Claude Code’s hooks 5. Test it: jev-guard check Bash '{"command":"rm -rf ~/"}' -> DENY, risk 3.0/3 6. Now every tool call gets risk-scored before it runs. Destructive ones get blocked, risky ones wait for your OK 7. Every tool result gets scanned too: web pages, emails, MCP output, every CLAUDE.md and skill. Prompt injections get flagged before your agent obeys them The whole setup takes about 5 minutes > The engine is Jev from TypeSafe AI. It doesn’t chat. It answers typed questions with a calibrated yes/no and a confidence score, in well under a second. > According to the repo, that’s about $0.00004 per check, so a 1,000-call session costs around 4 cents. Works with Claude Code, Codex, Cursor, Gemini CLI, Copilot CLI and more. Your second brain gets memory, email and a browser. Now it gets a bodyguard. -> http://github.com/leepokai/jev-guard -> more Jev guardrails: http://github.com/yibie/awesome-jev Save this before your agent reads the wrong email.
This post quotes another post: x.com/thegreatest_sv/status/2102802378378621355