{
  "batch": "read1-076",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Adds turn-completion and approval notifications, a chime, and a Desktop status chip.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Hooks and a Desktop busy-state watcher provide useful notifications without external accounts.",
      "worst": "The setup includes author-specific Windows paths and manual Desktop copying, while the small Python suite does not cover the Desktop watcher or real notifications.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Home Assistant device control, state-change events, and notification delivery to Hermes.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A real gateway adapter combines reconnect backoff, opt-in event filters, secret-scope credentials, and tested service-target restrictions.",
      "worst": "Control is unrestricted by entity until the operator configures filters, and a Home Assistant instance and powerful long-lived token are required.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150350,
      "name": "telos",
      "does": "Adds Telos model and workspace-router selection with Hermes-managed browser authentication.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 19,
      "best": "Uses Hermes provider and PKCE seams instead of implementing credential storage or inference transport itself.",
      "worst": "The pinned repository contains no tests despite the PR describing an external contract suite, and custom auth URL validation does not require HTTPS.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150563,
      "name": "hermes-roam",
      "does": "Synchronizes encrypted Hermes memories, skills, profiles, and shared configuration between the user’s machines through their own storage.",
      "useful": 5,
      "reliable": 5,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 28,
      "best": "Combines encrypted bundles, signed compare-and-swap heads, conflict-aware journaled restores, and extensive adversarial regression coverage.",
      "worst": "Users must provision the shared key and backend on each device, resolve conflicting edits themselves, and manage growing remote history.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 149755,
      "name": "vibeleak-atlas",
      "does": "Provides a native Desktop workbench for approved website assessments, read-only local inspection, and unsent fix-plan drafts.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 3,
      "beyond": 4,
      "total": 23,
      "best": "The Desktop workflow implements explicit scope and cost consent, installation-bound receipts, redacted drafts, and bounded native folder inspection.",
      "worst": "Website assessments require a paid VibeLeak owner key; local checks are limited static patterns, and native acceptance is Windows-only.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152894,
      "name": "browsersolver",
      "does": "Adds BrowserSolver as a paid extract-only backend for retrieving protected webpages and returning readable text.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 19,
      "best": "Fits Hermes’s web-provider interface with secret-scope credentials, engine validation, per-URL errors, and mocked contract tests.",
      "worst": "The PR reports no live API or local Hermes-validator check, and requests are sequential with a 120-second timeout each and unbounded response reads.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153609,
      "name": "innerscape",
      "does": "Connects Hermes tools and a native Desktop page to a self-hosted check-in, journal, and inbox service.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "total": 22,
      "best": "Implements bounded HTTP, redirect and proxy refusal, secret-scope tokens, gateway restrictions, and detailed consent and failure-path tests.",
      "worst": "Requires a separately hosted server and expiring full-account token, and agent save consent relies on a model-set boolean rather than an independent approval.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150312,
      "name": "cooldown",
      "does": "Intercepts package-install terminal calls to block known malicious releases and request approval for fresh or unverifiable packages.",
      "useful": 5,
      "reliable": 3,
      "polish": 3,
      "creative": 4,
      "beyond": 5,
      "total": 25,
      "best": "Adds an automatic supply-chain checkpoint through Hermes’s approval hook with keyless registry lookups and offline policy tests.",
      "worst": "Version ranges are checked as latest rather than resolved, and packages beyond the first twelve or unsupported install paths can pass unchecked without a notice when all checked findings are OK.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151211,
      "name": "caduceus",
      "does": "Builds a local searchable health and DNA vault with importers, source-linked genetics and trends, reports, and research-watch blueprints.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 4,
      "total": 24,
      "best": "A substantial local data pipeline distinguishes absent evidence from negative results and tests privacy across search, reports, trends, and research terms.",
      "worst": "The vault is unencrypted at rest and defaults to open disclosure, while tool results expose selected health data to the configured model provider.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152828,
      "name": "lane-keeper",
      "does": "Keeps persistent active and dormant project lanes in Markdown, injects focus context, and reserves promotions for user slash commands.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 3,
      "beyond": 4,
      "total": 21,
      "best": "Separates model capture and checkpoint tools from user status controls and tests cap handling, stale notices, and tampered Markdown.",
      "worst": "The advertised hard gate uses best-effort tool-name and command-text matching that can miss indirect registry writes; the JSON registry also lacks cross-process locking.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151776,
      "name": "meridian",
      "does": "Discovers lifecycle state machines in Python and JavaScript-family code and checks accepted transition specs with source anchors and an audit ledger.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 4,
      "beyond": 4,
      "total": 23,
      "best": "Provides deterministic source-linked checks, CI exit codes, edit-time advice, and a hash-chained ledger without a model or network.",
      "worst": "The Python analyzer treats equality inside OR conditions as a state guard and identifies fields by name without receiver identity, so its claim of authoritative transitions exceeds the analysis.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150245,
      "name": "commonplace",
      "does": "Replaces Hermes memory with curated Markdown entries, lexical recall, turn journals, handover cards, and pre-compression archives.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 3,
      "beyond": 5,
      "total": 23,
      "best": "Integrates directly with the memory lifecycle and includes host-manager tests for checkpoint failures and profile isolation.",
      "worst": "Its checkpoint preserves only user/assistant text, omitting tool results and non-text evidence, and atomic replacement is not fsynced despite the durable-archive claim.",
      "standout": false,
      "blocked": null
    }
  ]
}