{
  "batch": "read1-143",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Adds turn-completion and approval notifications, a Desktop status chip, and mute controls.",
      "useful": 4,
      "reliable": 4,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 21,
      "best": "Combines real lifecycle hooks with Desktop busy-state watching and avoids storing approval commands.",
      "worst": "Setup requires a manual Windows Desktop file copy, and the small Python suite does not verify the Desktop notification path.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant events and cron notifications and exposes four device-query and service-control tools.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A real gateway platform combines filtered event delivery with scoped secrets, bounded requests, entity policies and extensive safety tests.",
      "worst": "Entity restrictions are opt-in and cannot constrain the effects of an allowed script or scene inside Home Assistant.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153481,
      "name": "hermes-wake",
      "does": "Persists watches on systemd units, processes or output files and wakes the originating messaging chat through kanban completion.",
      "useful": 5,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "Solves the agent promising to report back on detached work with persisted, chat-scoped watches, atomic claims and retry tests.",
      "worst": "Requires a running messaging gateway and kanban notifications; a crash after completion but before recording success can cause a duplicate wake.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 151109,
      "name": "warden",
      "does": "Adds scoped security scans, an agent action ledger, evidence-backed investigations, campaign correlation and containment planning.",
      "useful": 3,
      "reliable": 4,
      "polish": 3,
      "creative": 4,
      "beyond": 4,
      "total": 22,
      "best": "Operator-owned scopes, canonicalized targets, bounded scanner execution and real Hermes dispatch tests give its six-tool security workflow substance.",
      "worst": "Containment cannot execute, scanners need separate installation, and correlation quality is established on a synthetic corpus rather than field data.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153966,
      "name": "call-your-shot",
      "does": "Measures the agent's predicted tool-call count and duration against hook-observed work and feeds back a persistent calibration record.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 4,
      "total": 23,
      "best": "Uses measured tool-loop activity and SQLite history to turn effort estimates into a feedback loop with no external service.",
      "worst": "Participation still depends on a prompt the model can ignore, and wall-clock measurements include approval delays while excluding delegated subagent calls.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151346,
      "name": "google-workspace",
      "does": "Adds a Desktop workspace and forty tools for Gmail, Calendar, Drive, Docs, Sheets and Contacts with cross-app workflows.",
      "useful": 5,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "Broad everyday utility comes with Hermes-managed OAuth, write-approval hooks, review dialogs, careful retry behavior and substantial Python and UI tests.",
      "worst": "Google Cloud OAuth setup is demanding, and the README acknowledges that RSVP and actions inside a running Desktop have not been tested live.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151013,
      "name": "hermes-audio-api",
      "does": "Serves authenticated OpenAI-compatible transcription and speech endpoints using the profile's configured Hermes voice providers.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A gateway-managed listener makes Hermes voice providers reusable by other clients, with scoped credentials, streaming limits, codec checks and discovery tests.",
      "worst": "Depends on private Hermes voice entry points and optional ffmpeg; concurrent listeners across multiplexed profiles are not covered by tests.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 154021,
      "name": "hermes-3d",
      "does": "Mirrors Hermes activity, schedules and optional profile metadata into a local explorable 3D world embedded in Desktop.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 5,
      "beyond": 5,
      "total": 26,
      "best": "A distinctive Desktop experience has a real event bridge, sandboxed frame, verified engine download and queued approval-gated cron actions.",
      "worst": "The separate Node engine and optional private database reads add setup and compatibility burden, while end-to-end first-run tests use a fake engine release.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149803,
      "name": "printwatch",
      "does": "Implements LAN status, file upload, print control and camera tools for Anycubic, Bambu and Moonraker printers.",
      "useful": 3,
      "reliable": 1,
      "polish": 2,
      "creative": 4,
      "beyond": 3,
      "total": 16,
      "best": "The clean-room Anycubic handshake and firmware-specific G-code packaging address a concrete own-hardware workflow.",
      "worst": "register stores PluginContext as _agent, but credential lookup expects its nonexistent secret_scope attribute and returns empty configuration; there are no tests or enforced print-start approval hooks.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152684,
      "name": "selaeron-paperclip-sel9",
      "does": "Posts a comment to an operator-allowlisted Paperclip issue after looking up its single current live run.",
      "useful": 2,
      "reliable": 2,
      "polish": 2,
      "creative": 2,
      "beyond": 3,
      "total": 14,
      "best": "The registered handler obtains run identity from a read-only lookup and refuses missing or ambiguous runs, with scoped credentials and comment-only writes.",
      "worst": "The duplicate key includes summary text and exists only in memory, so changing the summary or restarting permits another comment for the same run despite the one-comment claim.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151293,
      "name": "apple-keychain",
      "does": "Adds a macOS Keychain SecretSource plus operator commands for setup, diagnosis, secret rotation and recovery.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "Improves Hermes credential handling through its actual SecretSource interface, bounded noninteractive native reads and recovery-aware writes backed by discovery and disposable-Keychain tests.",
      "worst": "macOS developer tools and service-identity Keychain authorization are required; helper rebuilds can require reauthorization and several Hermes imports are private.",
      "standout": false,
      "blocked": null
    }
  ]
}