{ "batch": "read1-047", "plugins": [ { "pr": 0, "name": "done-bell", "does": "Adds turn-completion and approval notifications, an optional chime, and a Desktop status/settings pane.", "useful": 4, "reliable": 3, "polish": 2, "creative": 1, "beyond": 4, "best": "Lifecycle hooks and Desktop busy-state observation deliver useful notifications without model calls or credentials.", "worst": "The README installs from the author's absolute Windows development path and requires a manual Desktop copy, while tests cover only the Python side.", "standout": false, "blocked": null, "total": 18 }, { "pr": 0, "name": "homeassistant", "does": "Connects Hermes to Home Assistant device states and service controls, gateway state-change events, and notification delivery.", "useful": 4, "reliable": 4, "polish": 4, "creative": 2, "beyond": 5, "best": "A real event-driven gateway platform complements four device tools, with scoped secrets and extensive entity-policy and reconnect tests.", "worst": "Entity restrictions are opt-in, so an unrestricted token and unconfigured allow/deny lists leave broad device-control authority.", "standout": false, "blocked": null, "total": 24 }, { "pr": 153719, "name": "test-drive", "does": "Detects capability gaps, recommends catalog plugins, and runs an approved pinned candidate in a temporary Hermes profile with before/after receipts.", "useful": 4, "reliable": 4, "polish": 4, "creative": 4, "beyond": 5, "best": "Combines conversational gap hooks, trust cards, approval-gated exact-SHA installs, bounded child runs and transcript-verified tool-use evidence.", "worst": "The temporary profile is not OS isolation, and plugins requiring Desktop, hardware, existing user data or OAuth cannot demonstrate their normal value there.", "standout": false, "blocked": null, "total": 26 }, { "pr": 151887, "name": "cmi", "does": "Replaces Hermes context selection with deterministic shortening, recoverable originals, cache-aware rendering and experimental project memory.", "useful": 5, "reliable": 4, "polish": 4, "creative": 4, "beyond": 5, "best": "Implements the context-engine contract with store-before-shorten recall, tool-pair preservation and extensive cache, model-switch and project-boundary regressions.", "worst": "Persisted originals have heuristic secret screening and finite retention, making the README’s absolute privacy and nothing-lost assurances stronger than the implementation.", "standout": true, "blocked": null, "total": 27 }, { "pr": 151378, "name": "0xarchive", "does": "Declares an OAuth-connected hosted MCP service for Hyperliquid and Lighter market data and optional account/webhook operations.", "useful": 3, "reliable": 3, "polish": 4, "creative": 2, "beyond": 3, "best": "A minimal portable package delegates OAuth storage to Hermes and marks the remote server untrusted.", "worst": "The required sign-in overrides the package trust setting unless manually restored, and the pinned repository contains neither the server implementation nor its tests.", "standout": false, "blocked": null, "total": 18 }, { "pr": 152362, "name": "hermes-sonic-ui", "does": "Adds local sound synthesis, opt-in Desktop event sounds, an eight-layer composition editor and reviewed model-generated patches.", "useful": 3, "reliable": 4, "polish": 5, "creative": 4, "beyond": 5, "best": "A complete local audio workspace combines composition/export with Desktop event integration, explicit audio consent and guarded, hash-bound source injection.", "worst": "Native platform verification is concentrated on Windows, while automated Desktop/model integration uses SDK fixtures and Compose is limited to four bars.", "standout": false, "blocked": null, "total": 26 }, { "pr": 153303, "name": "data", "does": "Turns spreadsheets and pasted tables into editable Desktop reports with locally computed charts, reviewed suggestions and chat tools.", "useful": 4, "reliable": 3, "polish": 5, "creative": 3, "beyond": 5, "best": "Charts aggregate actual rows locally, numeric remarks use computed placeholders, and proposals wait for acceptance with undo.", "worst": "Hidden Ask sessions can use the user’s tools; avoiding writes, commands and messages is prompt advice plus approval denial, not an enforced tool allowlist.", "standout": false, "blocked": null, "total": 25 }, { "pr": 153634, "name": "radar", "does": "Watches mail, calendars, repositories and chats to maintain long-lived tasks, investigate developments and proactively deliver decisions to the owner.", "useful": 5, "reliable": 2, "polish": 5, "creative": 4, "beyond": 5, "best": "Implements persistent cross-source tasks, lifecycle observation, bounded background jobs, consent-bound operations and a Desktop/dashboard view with extensive tests.", "worst": "The unattended-job firewall permits browser tools, terminal and execute_code; its own implementation admits scripts and SSH evade effect checks, weakening the external-action consent guarantee.", "standout": false, "blocked": null, "total": 26 }, { "pr": 153637, "name": "incognito-private-mode", "does": "Adds request privacy flags, memory stripping, tool vetoes, coverage reporting and consent-gated cleanup of closed private sessions.", "useful": 4, "reliable": 1, "polish": 4, "creative": 3, "beyond": 5, "best": "Uses request/execution middleware and provenance-fenced deletion with extensive adversarial tests and unusually explicit coverage limits.", "worst": "The pinned tree commits executable Python bytecode caches, including enforcement modules, violating catalog rule 17; background and MoA requests also remain outside protection.", "standout": false, "blocked": null, "total": 22 }, { "pr": 151314, "name": "job-hunt-tracker", "does": "Stores job applications locally and exposes duplicate checks, status updates, follow-up queries and summary counts as six chat tools.", "useful": 3, "reliable": 3, "polish": 3, "creative": 1, "beyond": 2, "best": "A small dependency-free implementation validates dates and statuses, rejects duplicate applications and atomically replaces its JSON store.", "worst": "There are only manual test instructions, and its process-local lock cannot prevent lost updates when separate Hermes processes write the same JSON store.", "standout": false, "blocked": null, "total": 14 }, { "pr": 149540, "name": "forgebox", "does": "Snapshots dirty Git checkouts into disposable worktrees, redirects supported Hermes tool paths, journals execution and lets users explicitly review, apply or discard changes.", "useful": 4, "reliable": 4, "polish": 4, "creative": 3, "beyond": 5, "best": "Preserves dirty work and the real index, with hook integration, conflict-aware staged application, rollback regressions and a Desktop review pane.", "worst": "Redirection covers known file arguments and terminal working directories only; absolute shell paths and subprocess side effects escape it, and apply is not crash-atomic.", "standout": false, "blocked": null, "total": 25 }, { "pr": 153651, "name": "logmine", "does": "Exposes local log-template counting, regex search with context and timestamp-bucket timelines as three read-only tools.", "useful": 3, "reliable": 2, "polish": 3, "creative": 2, "beyond": 3, "best": "Deterministic template normalization and streaming file iteration can reduce large repetitive logs to compact counts without network services or dependencies.", "worst": "Bounded-memory claims overreach: complete lines are read before truncation and timeline buckets are capped only after accumulation, while regex matching has no timeout and no automated tests ship.", "standout": false, "blocked": null, "total": 16 } ] }