{
 "schema_version": 1,
 "generated": "2026-10-26",
 "id": "nassim-arifette-jevgrep--review-what-gets-sent-before-searching",
 "repo": "nassim-arifette/jevgrep",
 "repo_url": "https://github.com/nassim-arifette/jevgrep",
 "repo_slug": "nassim-arifette-jevgrep",
 "title": "Review what leaves the machine before a first search",
 "page_title": "How to review what leaves the machine before a first search with Jevgrep",
 "summary": "Check the eligible scope, limits and provider setup without any network request.",
 "who": "A security-minded developer or team lead who must approve sending source code from a repository to an external AI provider.",
 "problem": "Without a clear review, it is unclear which files and fragments would be disclosed to a remote provider and how much work a search would do.",
 "outcome": "A written review of eligible files, excluded files, search cost and provider settings that can be approved before the first live search.",
 "steps": [
  "Run `npm install -g @nassim-arifette/jevgrep`",
  "Run `jevgrep init --global` and then `jevgrep init` from the repository root, leaving remote evaluation disabled if approval is pending",
  "Run `jevgrep doctor` to check the provider, credential state, authorized root, limits and cache without a network request",
  "Run `jevgrep inspect` to list eligible files, fragments and exclusions",
  "Add repository-specific exclusions to `.jevgrepignore` where needed, then run `jevgrep inspect` again"
 ],
 "agent_prompt": "In the repository at <repo path>, run `jevgrep doctor` and `jevgrep inspect` and summarize the eligible file count, the exclusions and the provider in use. Verify that no search command has been run and that remote evaluation is disabled until a person approves it.",
 "agents": [
  "any"
 ],
 "difficulty": "Intermediate",
 "time": "30 minutes",
 "basis": "readme",
 "caveat": "The README notes that credential filters cannot detect every secret, so the inspect review does not guarantee that no sensitive content is eligible.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "typescript",
 "requirements": [
  "Node.js 24",
  "npm",
  "An API key for TypeSafe AI, Vercel AI Gateway or OpenRouter",
  "Permission to send eligible source excerpts from the target repository to the chosen provider"
 ],
 "risk": "sensitive",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.8,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/nassim-arifette-jevgrep/review-what-gets-sent-before-searching/",
 "md": "https://dedupedai.com/use-cases/nassim-arifette-jevgrep/review-what-gets-sent-before-searching/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/nassim-arifette-jevgrep--review-what-gets-sent-before-searching.json",
 "api_version": "v1"
}