
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@apixly/jev-filter
Advanced tools
简体中文 · Quick start · Agent setup · Benchmarks · Documentation · Releases
A semantic filter between your tools and your AI agent. Capture command output, search results, browser controls or logs inside the CLI. Let Jev judge them using the agent's task and context. Return relevant evidence and unresolved IDs instead of an entire raw dump.
Configure a numeric-only local ledger, then run jev-filter stats dashboard (automatically selects a free port when 8765 is occupied) to automatically open a local browser dashboard showing estimated input-token reduction, USD input value, Jev cost and net value. Filter by model/date and export JSON or a standalone HTML snapshot. Unknowns and negative values stay visible. These are input-equivalent estimates, not invoice savings. See setup and measurement boundaries.
REVIEW. 8/8 exact fixture runs, plus three installed workflow acceptance checks. Public data · Integration evidenceUse it for many records + repeated semantic judgment + clear criteria. Use native tools for exact paths, IDs, selectors, calculations and short results. Keep open-ended reasoning and writing in your primary model.

48 real agent runs: Astra and Luna, four scenarios, raw/filtered arms, three repetitions. All runs selected the expected IDs. Four raw runs requested additional review; no filtered run did. Returned tool context fell 88–97%. Cold API-equivalent cost ranged from 20.8% lower to 0.6% higher; latency improved in some cells and regressed in others. These are small synthetic tests, not production guarantees.
Method and all results · Per-run JSON · CSV · Decision evidence

96 synthetic records × two predicates, two runs per arm. Batching used 56.5% fewer Jev input tokens; batch + parallel was 32.4% faster than single-record parallel. This measures the Jev stage, not a whole agent task. Raw results · Reproduce
Node.js 22+ · macOS or Linux · no separate Python setup for the npm distribution. On Windows use WSL, or install the Python package natively from a GitHub Release wheel or pip install 'jev-filter[code] @ git+https://github.com/apixly-ai/jev-filter.git@v0.2.3' (Python 3.10+; rg on PATH for search; no PyPI package). A TypeSafe Jev API key is needed only for inference.
Install from npm:
npm install -g @apixly/jev-filter
jev-filter doctor
Set your key, then try a self-contained example from any directory:
export TYPESAFE_API_KEY='your-key'
jev-filter query --input - --mode choose \
--task 'Choose the record showing a CURRENT unresolved DNS failure' <<'JSON'
[
{"id":"a","text":"The previous DNS failure recovered; requests now succeed."},
{"id":"b","text":"DNS lookup still fails; no connection can be established."}
]
JSON
Expected selection, with metadata omitted here:
{"selected_ids":["b"],"review_ids":[],"complete":true}
Small examples teach the interface; native tools are usually better for inputs this short. For real workloads, let the CLI collect the data itself:
# Run your trusted collector once; its full output stays inside the program.
jev-filter exec --task 'Find unresolved network failures' \
--analysis analysis.json -- your-collector --json
Start from a copyable analysis contract, then replace the collector. exec passes an argument array without an implicit shell. Read output and exit codes →
The CLI works with any agent that can execute commands. It is not a separate agent or a required MCP server.
1. Install the skill. After a global npm install, for Codex:
mkdir -p ~/.codex/skills
cp -R "$(npm root -g)/@apixly/jev-filter/skills/jev-filter" ~/.codex/skills/
For another agent, copy the same skill into its supported skill directory. Claude Code and generic harness setup →
2. Give the agent this routing rule.
Use jev-filter when many records need a clear semantic judgment.
Pass the task, scope, exclusions, success criteria and sourced facts.
Keep collection → analysis → compact output inside one tool call.
Inspect unresolved IDs; do not repeat settled judgments or wrap an
existing Jev workflow again. Use native tools for exact or short work.
3. Supply context that changes the answer. Jev does not inherit the agent's chat. Put shared facts in context, record history on each record, and declare required fields. The agent controls questions, filtering, ranking and output projection. Complete integration guide → · Context contract →
| You have… | Use | Start here |
|---|---|---|
| A custom command that produces lots of results | exec | Collector recipe |
| JSON candidate records | query | Selection recipe |
| Source code matching a broad lexical query | code-search | Code recipe |
| A local Camofox page with many controls | locate | Browser recipe |
| JSON/JSONL events across many requests | triage | Log recipe |
| An existing typed Jev workflow | Python batch.run or CLI batch | Library integration |
All flags and limits · Original evidence by ID · Architecture
We use Jev Filter in our own environment. Source annotation, Telegram maintenance planning and SRE routing retain their existing contracts and pass synthetic acceptance using real Jev calls. Private identities, credentials and production data are excluded from this repository.
exec runs your command and is not a sandbox. Selection does not authorize actions. Security →After one-time npm package trust setup, successful GitHub Releases automatically publish all five packages through OIDC and verify a fresh registry install. No long-lived npm token is stored. See publication and recovery.
git clone https://github.com/apixly-ai/jev-filter.git
cd jev-filter
python -m venv .venv && . .venv/bin/activate
python -m pip install -e '.[code,dev]'
sh scripts/check.sh
npm test
Contributing · Development and releases · Governance · Changelog · Report a bug
Maintained by Apixly / JIA-ss · MIT · Independent of TypeSafe.
FAQs
Give AI agents the signal: typed decisions, traceable evidence and bounded execution. Native runtime included.
The npm package @apixly/jev-filter receives a total of 1 weekly downloads. As such, @apixly/jev-filter popularity was classified as not popular.
We found that @apixly/jev-filter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.