{
  "batch": "read1-136",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Adds completion chimes, OS notifications and approval-status indicators to Hermes Desktop and CLI.",
      "useful": 4,
      "reliable": 3,
      "polish": 2,
      "creative": 2,
      "beyond": 4,
      "total": 19,
      "best": "Its small, dependency-free hooks and live Desktop watcher make background turns easier to follow.",
      "worst": "Setup uses an author-specific Windows path and a manual Desktop copy step, while tests cover only the Python side.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant device-control tools, filtered WebSocket events and cron notification delivery.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A genuine gateway platform with scoped credentials, target filtering, blocked dangerous service domains and extensive boundary tests.",
      "worst": "Useful primarily to Home Assistant owners, and entity restrictions remain opt-in rather than a default least-privilege policy.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152573,
      "name": "leash",
      "does": "Provides scope-gated web security probes, multi-identity access-control checks and an evidence ledger with reports.",
      "useful": 4,
      "reliable": 2,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "total": 21,
      "best": "Concrete replay, fuzzing and crawl primitives produce measured evidence rather than asking the model to invent security findings.",
      "worst": "Session credentials are stored in plaintext identities.json outside Hermes secret storage, and DNS authorization is separated from the later connection lookup.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151985,
      "name": "doubt",
      "does": "Uses token log probabilities to display uncertainty and request approval for uncertain re-derived tool arguments.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 5,
      "beyond": 5,
      "total": 25,
      "best": "Middleware exposes provider-level signals a skill cannot access, with heat maps and native human approval rather than automatic execution.",
      "worst": "Requires non-streaming compatible providers, adds a model request per guarded call, and lets calls through when scoring fails or re-derivations disagree too much.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 154013,
      "name": "timelinesai-whatsapp",
      "does": "Configures an OAuth-authenticated hosted WhatsApp MCP connection with an inbox workflow skill.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 3,
      "total": 17,
      "best": "Uses Hermes-managed OAuth and untrusted-server approvals, with explicit recipient-and-text confirmation guidance.",
      "worst": "The pinned package contains configuration and a skill only; the actual tools run remotely and cannot be audited at this commit.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149433,
      "name": "remoet",
      "does": "Connects Hermes to a hosted tech-job search and account-management MCP server.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 2,
      "beyond": 3,
      "total": 16,
      "best": "Public job search needs no account and the documentation clearly discloses public profile data and application side effects.",
      "worst": "The documented OAuth setup replaces the package trust setting and permits write tools without approval unless users manually restore untrusted; server implementation is not pinned.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151702,
      "name": "decision-forge",
      "does": "Routes, lints and renders structured decision briefs as interactive HTML and Markdown with a Desktop field guide.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 3,
      "beyond": 3,
      "total": 21,
      "best": "A coherent set of six formats, escaped HTML compilation, Markdown fallbacks and a finished Desktop guide make the presentation useful.",
      "worst": "Most of the decision discipline is a bundled prompt contract; the code checks structure and wording rather than whether evidence or recommendations are sound.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151372,
      "name": "hermes-t3sidebar",
      "does": "Adds a Desktop session sidebar with working-state shelves, drafts, project controls, usage charts and account-limit forecasts.",
      "useful": 4,
      "reliable": 1,
      "polish": 5,
      "creative": 3,
      "beyond": 5,
      "total": 23,
      "best": "Extensive session-management UI and cross-client state address everyday Hermes workflow friction, backed by broad frontend and backend tests.",
      "worst": "The pinned sampler directly reads Claude Code .credentials.json outside Hermes secret routes and relies on many private core interfaces, despite disclosing those deviations.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150547,
      "name": "vibe-relay",
      "does": "Routes coding delegation by quota, checks changed paths and test receipts, and parks work for a scheduled resume after reset.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 25,
      "best": "A real delegation provider combines quota-aware routing, native cron continuation and regression tests for child environments and path confinement.",
      "worst": "Acceptance hashes untracked filenames without their contents and accepts PASS-like terminal output without checking it matches the required gate command, weakening its central freshness guarantee.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 154042,
      "name": "ghostwriter",
      "does": "Adds a screenplay workspace with scene-aware agent tools, reviewable revisions, undo, and PDF, Fountain and Final Draft import/export.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 26,
      "best": "A substantial document engine and Desktop editor combine immutable revisions, compare-and-swap writes, proposal validation and format-specific tests.",
      "worst": "The audience is specialized and PDF import is best effort, with scanned and some CID-font documents unsupported.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 152348,
      "name": "pugin",
      "does": "Shows a Desktop companion tracking the focused chat, subagents, processes and linked Kanban work, with attention nudges and confirmed stop controls.",
      "useful": 4,
      "reliable": 3,
      "polish": 5,
      "creative": 3,
      "beyond": 4,
      "total": 23,
      "best": "Turns the pet into an actionable job monitor using session-qualified runtime reads, read-only Kanban queries and explicit confirmation before stopping work.",
      "worst": "No tests are shipped at the pinned commit despite nontrivial polling, session ownership, stale-state and interruption logic.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151902,
      "name": "dsh-pet",
      "does": "Runs an upstream Electron desktop pet as a managed sidecar and maps Hermes session and tool events to its activity state.",
      "useful": 2,
      "reliable": 4,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 19,
      "best": "The adapter includes extensive lifecycle tests, a fully locked npm tree, scrubbed child environments and owned-process cleanup.",
      "worst": "A thin integration around an existing pet requires Node plus large runtime and Electron downloads, and only Windows has been verified.",
      "standout": false,
      "blocked": null
    }
  ]
}