jev-use icon

jev-use

shitianfang/jev-use · v0.8.0 · Development & Workflow

by shitianfangScan grade: GoodAwesome AI Plugins

Hands the steps of a Codex session that produce no text — is the build done, which of these elements do I click, is this shell command safe — to Jev, TypeSafe AI's judgment model, with a PreToolUse command gate and typed escalation back to the model for anything it cannot decide.

InstallSourceClaim this plugin
Follow0
Trust Score78Security scan89Components2
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is jev-use a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • 1 skill
  • 1 MCP server

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is jev-use?

jev-use is a published development & workflow plugin for AI coding agents that works with Codex and Claude Code, developed by shitianfang and distributed through the HOL AI plugin registry. Hands the steps of a Codex session that produce no text — is the build done, which of these elements do I click, is this shell command safe — to Jev, TypeSafe AI's judgment model, with a PreToolUse command gate and typed escalation back to the model for anything it cannot decide.

Canonical slug
shitianfang/jev-use
Version
v0.8.0 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

78

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
89/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/shitianfang/jev-use
Source commit
541c86caabf1…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
89
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-UpdmNq / cisco-skill-scanner: failedcodex:hol-plugin-scanner-UpdmNq / cisco-mcp-scanner: unavailable

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

20/20

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

20/20

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the jev-use entry from the jev-use marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall jev-use@jev-use.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "jev-use",
  "version": "0.8.0",
  "description": "Hands the agent steps that need no text output to Jev, TypeSafe's judgment model: typed yes/no, pick-one and score questions about one state answered in a single batched call, with typed escalation back to the LLM for anything it cannot or should not decide.",
  "repository": "https://github.com/shitianfang/jev-use",
  "license": "MIT",
  "interface": {
    "displayName": "jev-use",
    "developerName": "shitianfang",
    "shortDescription": "Route the no-text-output steps to a judgment model",
    "composerIcon": "./assets/icon.svg"
  },
  "author": {
    "name": "shitianfang",
    "url": "https://github.com/shitianfang"
  },
  "homepage": "https://github.com/shitianfang/jev-use",
  "keywords": [
    "jev",
    "typesafe-ai",
    "judgment",
    "router",
    "codex",
    "mcp"
  ],
  "mcpServers": "./.registry/mcp.json",
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/shitianfang/jev-use
Marketplace path
.claude-plugin/marketplace.json
Source path
plugins/shitianfang/jev-use
Install policy
AVAILABLE

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • jev-use

    skills/jev-use/SKILL.md

    Use before ANY step that is a decision rather than writing: labelling, filtering or triaging MANY items; checking whether a command, test or build succeeded; picking the next action from options you can list; judging safety, quality or severity; or risk-checking each command of a checklist or pipeline before it runs. Route by where the facts already are: facts already in your context go to the jev_judge tool with ALL questions batched into ONE call; items sitting in a file or in tool output go through the `jev-use judge` CLI from a script, so that data never enters the conversation; a safety decision that blocks every tool call belongs in the `jev-use hook gate` PreToolUse hook, not in a call you make by hand. Take any verdict back with escalate: true. Never for steps that must produce new text or code, or judgments whose options you cannot enumerate.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

508 bytes

cf05318077a32cf1…

.claude-plugin/plugin.json

file

729 bytes

ee19d2c8b1d45c51…

.codex-plugin/plugin.json

plugin-manifest

854 bytes

bea32e6dfa9d7369…

.mcp.json

file

116 bytes

8b99b7f49225ba1e…

.registry/mcp.json

mcp-config

78 bytes

c5bf02710d94ad99…

assets/icon.svg

asset

424 bytes

f6f8e85b7cc6a00d…

LICENSE

file

1,424 bytes

ed8ea09b506127e3…

package-lock.json

file

108,944 bytes

f26efda5faa8a2f9…

package.json

file

1,591 bytes

03f38fe64864a643…

README.md

file

4,927 bytes

bb87fa114f3652c9…

SECURITY.md

file

2,806 bytes

1bf9bfea5c4c0ad9…

skills/jev-use/SKILL.md

skill

3,377 bytes

75716b01e211c4e8…

tsconfig.json

file

369 bytes

0d2e570e60555cfb…

jev-use — Frequently asked questions

What is jev-use?
jev-use is an AI plugin in the HOL registry. Hands the steps of a Codex session that produce no text — is the build done, which of these elements do I click, is this shell command safe — to Jev, TypeSafe AI's judgment model, with a PreToolUse command gate and typed escalation back to the model for anything it cannot…
How do I install jev-use?
Install jev-use in your harness: Codex — codex plugin marketplace add shitianfang/jev-use; Claude Code — /plugin marketplace add shitianfang/jev-use; Any agent — npx [email protected] add shitianfang/jev-use. Full step-by-step guidance is on the HOL plugin page.
How do I install jev-use in HOL Guard?
To install jev-use in HOL Guard, start with hol-guard plugin install shitianfang/jev-use --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install jev-use in Codex?
To install jev-use in Codex, start with codex plugin marketplace add shitianfang/jev-use. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install jev-use in Claude Code?
To install jev-use in Claude Code, start with /plugin marketplace add shitianfang/jev-use. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for jev-use computed?
jev-use has a HOL Trust Score of 78 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/shitianfang%2Fjev-use/trust
Who publishes jev-use?
jev-use is published by shitianfang and listed on HOL.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from jev-use.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins