jev-guard 给 Claude Code 加风险拦截
用 Jev 引擎对每次工具调用做风险打分，拦截 rm -rf 等破坏性操作并扫描提示注入，约 5 分钟装好。
It's getting f*cking dangerous: you gave Claude your Gmail, your Drive and a browser. Nobody is watching what it does with them One poisoned email. One shady web page. One skill you installed from GitHub without reading. That's all it takes for your agent to run rm -rf or ship your files somewhere you'll never see. Here's how to give it a bodyguard: 1. Install jev-guard: npm i -g jev-guard 2. Grab a key at http://console.typesafe.ai (Vercel AI Gateway and OpenRouter keys work too) 3. Run jev-guard key "your-key" 4. Run jev-guard install claude to wire it into Claude Code’s hooks 5. Test it: jev-guard check Bash '{"command":"rm -rf ~/"}' -> DENY, risk 3.0/3 6. Now every tool call gets risk-scored before it runs. Destructive ones get blocked, risky ones wait for your OK 7. Every tool result gets scanned too: web pages, emails, MCP output, every CLAUDE.md and skill. Prompt injections get flagged before your agent obeys them The whole setup takes about 5 minutes > The engine is Jev from TypeSafe AI. It doesn’t chat. It answers typed questions with a calibrated yes/no and a confidence score, in well under a second. > According to the repo, that’s about $0.00004 per check, so a 1,000-call session costs around 4 cents. Works with Claude Code, Codex, Cursor, Gemini CLI, Copilot CLI and more. Your second brain gets memory, email and a browser. Now it gets a bodyguard. -> http://github.com/leepokai/jev-guard -> more Jev guardrails: http://github.com/yibie/awesome-jev Save this before your agent reads the wrong email.
这条是引用着另一条写的：x.com/thegreatest_sv/status/2102802378378621355