{
  "batch": "read1-043",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Notifies users when Hermes finishes a turn or needs approval, with a Desktop status chip, chime and notification settings.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Real lifecycle hooks and Desktop busy-state observation let users leave Hermes working and return when needed.",
      "worst": "The README requires a developer-specific Windows install path and manual pane copying, while tests cover backend state but not Desktop notification behavior.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant through four device tools and an event-driven gateway platform with notification delivery.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 25,
      "best": "A genuine platform adapter combines filtered events, reconnect backoff, scoped credentials, device control and extensive policy tests.",
      "worst": "Entity control restrictions are opt-in, and a fixed blocked-domain list cannot constrain what an otherwise permitted Home Assistant script or automation does.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152861,
      "name": "pinocchio",
      "does": "Records tool-call receipts and annotates closing claims as verified, contradicted or unverified, with a verification hook that requests correction.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 4,
      "beyond": 5,
      "total": 24,
      "best": "Deterministic receipt capture and output hooks tackle misleading completion claims without another model or network service.",
      "worst": "Claim matching uses broad regexes and the latest category receipt, so a successful narrow or merely test-labelled command can incorrectly verify an all-tests claim.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153192,
      "name": "hermis",
      "does": "Adds a Windows Electron overlay with voice-oriented Autopilot mode, floating data and artifact surfaces, application launching and real window arrangement.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 5,
      "beyond": 5,
      "total": 25,
      "best": "The overlay, authenticated loopback bridge, local camera gestures and Win32 window controls form a distinctive new interface for Hermes.",
      "worst": "Windows-only single-monitor support and a detached npm/Electron startup lifecycle leave substantial setup and process-recovery limits despite mocked bootstrap tests.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153696,
      "name": "blindoracle",
      "does": "Connects Hermes to a remote agent-trust and paid-services MCP endpoint, with delegation guidance and a local receipt-hash verifier.",
      "useful": 2,
      "reliable": 2,
      "polish": 3,
      "creative": 3,
      "beyond": 3,
      "total": 16,
      "best": "The local standard-library verifier can compare deliverable hashes without credentials, and the package itself never signs payments.",
      "worst": "The shipped transaction verifier accepts any successful transaction without matching recipient, amount or deliverable, while the remote trust-service implementation and tests are absent.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150510,
      "name": "accessible-session-list",
      "does": "Adds a keyboard and screen-reader-oriented Desktop session picker with title search, native list focus and explicit tab-opening actions.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 24,
      "best": "Native accessible controls, focus restoration, SDK-only navigation and Node/browser tests solve a concrete Desktop accessibility problem.",
      "worst": "It searches only the creation-ordered first 500 fetched sessions, Ctrl+H can lose to core handling, and real screen-reader acceptance remains unverified.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153881,
      "name": "hermes-model-board",
      "does": "Adds a phone-friendly dashboard for previewing and confirming model-route and reasoning-effort changes across local Hermes profiles.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 23,
      "best": "Single-use expiring previews, revision checks, explicit confirmation and per-profile readback protect bulk model-setting edits.",
      "worst": "It depends on private, version-sensitive host authentication and config APIs, supports only in-process local-file dashboards, and ships no automated tests.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153908,
      "name": "reliability-desk",
      "does": "Bundles eight Markdown skills for evidence-based release polls, incident reviews, FMEA, readbacks and change-control checklists.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 2,
      "beyond": 1,
      "total": 14,
      "best": "Detailed worksheets, named decision owners and evidence requirements make the reliability practices clear and usable.",
      "worst": "The pinned package is entirely skills and Markdown references, with no tools, hooks, executable enforcement or capability beyond prompting.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153168,
      "name": "sentinel-security",
      "does": "Statically scans referenced scripts or execute_code input before execution, requesting approval or blocking risky patterns, with optional VirusTotal hash lookup.",
      "useful": 4,
      "reliable": 2,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 19,
      "best": "The pre-tool hook makes findings actionable through Hermes approval/block responses and reads the optional VirusTotal key through secret scope.",
      "worst": "The submitted repository URL contains literal angle brackets; the exact SHA is readable at cogkreates/Sentinel-Security, but the guard misses terminal inline code and scans only the first 2 MB of at most five scripts.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151014,
      "name": "hermes-fal-video",
      "does": "Adds FAL video editing, extension and reference-to-video tools with per-model argument validation and local media uploads.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 2,
      "beyond": 3,
      "total": 19,
      "best": "Model-specific payload validation, multiplex-safe secret access and tests for uploads, discovery and timeout cancellation make the API integration careful.",
      "worst": "No live FAL generation is demonstrated, and the local-upload guard checks filename extensions and size rather than actual media content.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150943,
      "name": "shiftrepair",
      "does": "Repairs weekly staff schedules with minimum-change constraint optimization, independent validation, persistent revisions and a native Desktop board.",
      "useful": 3,
      "reliable": 5,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "A bounded solver, separate checker, exhaustive small-case oracle tests and revision/candidate checks support a reviewable proposal-to-Apply workflow.",
      "worst": "The scheduling model is limited to one location and seven days, with no shift durations, fairness, payroll or rest rules, and OR-Tools adds installation/startup cost.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153832,
      "name": "hermes-screen",
      "does": "Controls Jellyfin and YouTube playback on Chromecast, saves and retrieves edition-specific scenes, and runs a phone-camera rock-paper-scissors game on the TV.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 5,
      "beyond": 5,
      "total": 27,
      "best": "Receiver-confirmed actions, scoped secrets, expiring single-item relay links and extensive failure-path tests turn the user's own TV and phone into agent surfaces.",
      "worst": "Jellyfin playback requires a narrow direct-play codec profile without transcoding, while camera games need a separate HTTPS service and optional Custom Receiver registration.",
      "standout": true,
      "blocked": null
    }
  ]
}