{
  "batch": "read1-069",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Adds turn-completion and approval notifications, a chime, and Desktop status controls.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Desktop busy-state observation and CLI lifecycle hooks make notifications work beyond what a prompt can provide.",
      "worst": "Setup is a developer-specific Windows path plus a manual Desktop copy, and the small tests do not exercise actual OS notifications.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant device tools, state-change events, and notification delivery.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A real gateway adapter combines event filters, reconnect handling, scoped credentials and extensively tested service restrictions.",
      "worst": "It requires a Home Assistant installation and powerful access token; entity restrictions are opt-in and cannot constrain the token itself.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152423,
      "name": "pollinations",
      "does": "Adds a Pollinations image-generation provider with live model discovery, keyless generation, and authenticated editing.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Native provider integration adapts picker capabilities and pricing to the live catalog, with scoped secrets and bounded image handling.",
      "worst": "No tests are shipped, and the paid-model setting filters the picker rather than preventing a directly selected paid model from being requested.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149189,
      "name": "hermes-spendguard",
      "does": "Tracks model-call costs in SQLite and enforces human-configured daily and monthly budgets through lifecycle hooks.",
      "useful": 5,
      "reliable": 3,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 25,
      "best": "Accounting and pre-inference blocking directly improve the agent, with read-only agent tools and budget controls exposed through a slash command.",
      "worst": "Enforcement explicitly lets calls proceed on exceptions, and unpriced calls contribute no dollars to the cap despite the strong wallet-guard claims.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152408,
      "name": "rich-paste",
      "does": "Converts rich clipboard content into structured Desktop messages and interleaves images at their labels in model requests.",
      "useful": 5,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 28,
      "best": "It fixes a concrete multimodal input limitation through request middleware, with a finished Desktop workflow and extensive cross-format and safety tests.",
      "worst": "Screenshot matching can fall back to attachment order after reload or for large images, allowing a label to bind the wrong replacement image.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 152832,
      "name": "ag4te",
      "does": "Mines local git history into eras, activity patterns, authorship summaries and interactive Desktop strata visualizations.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 3,
      "total": 22,
      "best": "A distinctive, detailed Desktop visualization is backed by repository-root checks, cancellable bounded subprocesses and tests of real git history.",
      "worst": "Work classifications and practice-health signals are keyword heuristics rather than code analysis, while first use also needs uv and a separate DevArch download.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152746,
      "name": "atlas",
      "does": "Maintains cross-agent project records from local conversation stores and delivers actionable Telegram briefs with a dashboard and guarded agent tools.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 26,
      "best": "Cross-harness collection, evidence-grounded records and owner-message verification provide substantial persistent agent capability, backed by a broad scenario harness.",
      "worst": "It keeps verbatim potentially secret-bearing transcripts and makes unattended model calls even while paused, and real-model and real-Telegram behavior remains untested.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150320,
      "name": "skysay",
      "does": "Packages a read-only remote MCP connection and workflow skill for inspecting Skysay workspaces, voice agents, numbers and calls.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 3,
      "total": 17,
      "best": "Uses Hermes-managed OAuth and a dedicated read-only endpoint with clear setup, revocation and sensitive-data guidance.",
      "worst": "The pinned package contains no server implementation or tests, so its read-only guarantees depend on an external service that cannot be audited in this tree.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150095,
      "name": "plugin_foundry",
      "does": "Generates and tests native SQLite-backed folder-scanning or JSON-API-polling plugins for human review and installation.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 3,
      "beyond": 4,
      "total": 20,
      "best": "Careful host-bound approval handling and confinement tests protect generation and execution outside its data root.",
      "worst": "Only two fixed templates are supported, and the generated API fetch reads an unbounded response with no public-address or redirect guard despite calling the URL public.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153840,
      "name": "antemuse",
      "does": "Adds bounded walk, daydream, dream, doomscroll and unstuck states with persistent context, optional tool restrictions and a Desktop visualization.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 5,
      "beyond": 4,
      "total": 23,
      "best": "An unusual state engine combines concept graphs, memory-derived material, lifecycle hooks and a visual pane, with extensive state and integration tests.",
      "worst": "State and optional tool restrictions are profile-wide rather than session-bound, so closing tools in one chat can affect another chat on the same profile.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150675,
      "name": "hermes-secret-gate",
      "does": "Scans supplied text and tool results for credential patterns and returns masked findings and advisory gate receipts.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 2,
      "beyond": 3,
      "total": 16,
      "best": "Deterministic offline scans and bounded receipts provide a small, readable auditing tool with tests for common credential formats.",
      "worst": "The advertised fail-closed gate only returns a BLOCK label; its post-tool hook logs after execution and neither prevents outbound sends nor changes results.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152061,
      "name": "heycai-clinic-skills",
      "does": "Bundles instruction-only skills for estimating clinic front-desk revenue losses and auditing clinic websites for search visibility.",
      "useful": 2,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 1,
      "total": 12,
      "best": "Detailed workflows demand clinic-provided figures and site evidence, distinguish uncertainty, and avoid needing patient data.",
      "worst": "The package adds only two Markdown skills with no executable integration, so a prompt or skill can provide its entire capability.",
      "standout": false,
      "blocked": null
    }
  ]
}