{
 "batch": "read1-095",
 "plugins": [
  {
   "pr": 0,
   "name": "done-bell",
   "does": "Rings an OS notification and chime and shows a busy/done/needs-you status chip when a Hermes turn ends or an approval is waiting.",
   "useful": 3,
   "reliable": 3,
   "polish": 3,
   "creative": 2,
   "beyond": 3,
   "total": 17,
   "best": "Small, keyless and careful: every hook swallows its own errors, approval commands are never stored, and a Desktop pane with mute/test toggles is included.",
   "worst": "The Desktop pane must be copied by hand per the README (its install steps show a developer's own Windows paths), and only nine light unit tests cover the store and hooks.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 0,
   "name": "homeassistant",
   "does": "Official Home Assistant gateway platform (WebSocket state-change events in, persistent notifications out) plus four REST tools to list, read and control devices.",
   "useful": 4,
   "reliable": 5,
   "polish": 5,
   "creative": 3,
   "beyond": 5,
   "total": 27,
   "best": "Production-grade: secrets via get_secret with a password-flagged HASS_TOKEN, allow/deny entity policy enforced before any service call, and roughly 2,500 lines of tests.",
   "worst": "As a port of what used to be built into Hermes core it is a well-known integration rather than a new idea.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 152555,
   "name": "hermes-multibot",
   "does": "Adds up to eight extra DM-only Telegram bot transports, each with its own alias and allowlist, that share one Hermes profile in the same gateway.",
   "useful": 3,
   "reliable": 4,
   "polish": 3,
   "creative": 3,
   "beyond": 4,
   "total": 21,
   "best": "Registers real platforms via register_platform, reads every slot token through get_secret, fails closed on bad config, and tests token locks, duplicate tokens, ACL replay and media caps.",
   "worst": "A niche need, DM-only, installed by copying files by hand, and the README itself says it is not a sandbox between users who share the profile's memory.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 153997,
   "name": "agenttrust-seal",
   "does": "Writes a <file>.seal.json with the file's sha256, size, author and time, and later checks the file against it, as a tool and a slash command.",
   "useful": 2,
   "reliable": 2,
   "polish": 3,
   "creative": 2,
   "beyond": 2,
   "total": 13,
   "best": "Tiny, readable, local-only stdlib code with an honest three-way result (holds, broken, no seal) and a selftest.",
   "worst": "The seal is an unkeyed hash stored next to the file, so whoever edits the file can simply re-seal it: it catches accidents, not tampering, which is less than the README's claim to 'prove' a handoff was not changed, and sha256sum in a skill would do the same.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 152807,
   "name": "dosbox-full-auto",
   "does": "Downloads a pinned, checksum-verified native DOSBox-automation bundle, registers it as an MCP server exposing about 55 emulator tools, and ships a skill to drive DOS apps.",
   "useful": 2,
   "reliable": 3,
   "polish": 3,
   "creative": 4,
   "beyond": 3,
   "total": 18,
   "best": "Supply chain handled with care: the release tarball is refused unless its sha256 matches a pinned table, and the VLLM key is read only via get_secret and never minted without an explicit terms step.",
   "worst": "The plugin itself is a thin installer with no tests of its own that fetches and runs 16.5 MB of native binaries, and its visual checks depend on a third-party Decision API key; DOS automation is a narrow audience.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 152891,
   "name": "piloterr",
   "does": "A web-extract backend that sends web_extract fetches through the Piloterr scraping API (plain, JS-rendering or anti-bot engines).",
   "useful": 3,
   "reliable": 4,
   "polish": 3,
   "creative": 2,
   "beyond": 3,
   "total": 18,
   "best": "Clean and small: the key comes only from Hermes's secret scope, requests have timeouts, errors are per-URL and clear, and mocked tests cover the main and failure paths.",
   "worst": "A vendor adapter for a paid scraping service; it does one ordinary thing and spends the user's credits.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 152350,
   "name": "storage-utility",
   "does": "Tune-up: a Desktop/dashboard panel that shows what Hermes stores, does review-first cleanup with a restorable Trash, checks service health and stops leftover processes.",
   "useful": 4,
   "reliable": 3,
   "polish": 5,
   "creative": 4,
   "beyond": 4,
   "total": 24,
   "best": "Finished like a product: many screenshots, a large Desktop and dashboard UI, and a safety design where nothing is deleted without a frozen, re-checked review list and a 30-day Trash.",
   "worst": "About 9,000 lines of code that deletes files, prunes sessions and stops processes, and not one test is in the repository.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 149741,
   "name": "zeromem",
   "does": "A Hermes memory provider backed by a Rust core that stores every message verbatim in one SQLite file and recalls it with local embeddings and lexical search, no LLM calls.",
   "useful": 4,
   "reliable": 3,
   "polish": 4,
   "creative": 4,
   "beyond": 5,
   "total": 25,
   "best": "Changes Hermes's memory through register_memory_provider with prefetch, background writes, recall/forget tools and a zero-token import of past sessions, all on the user's machine.",
   "worst": "The Hermes wrapper has only a smoke script and no tests (the Rust core has eight pipeline tests), and it relies on a PyPI wheel plus a 130 MB model download at first run.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 151964,
   "name": "takeover",
   "does": "When the agent reaches a step only a person should do (sign-in, 2FA, CAPTCHA, payment) it calls request_takeover, and the user takes control of the agent's live browser over bundled noVNC from WebUI, dashboard or Desktop, then hands back.",
   "useful": 4,
   "reliable": 4,
   "polish": 5,
   "creative": 5,
   "beyond": 5,
   "total": 28,
   "best": "A real human-in-the-loop for logins and payments across WebUI, dashboard and Desktop, with a hook that fences browser tools while a person holds the screen and about 2,300 lines of unit and e2e tests.",
   "worst": "Heavy side effects: loading the plugin copies a page into hermes-webui and starts a detached service, and first use installs TigerVNC/Xfce as root; it is Linux-only.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 149604,
   "name": "ao-bridge",
   "does": "A Hermes dashboard tab that shows the local Agent Orchestrator daemon's sessions as a Kanban board, with spawn, send, kill and a live event stream.",
   "useful": 2,
   "reliable": 3,
   "polish": 2,
   "creative": 3,
   "beyond": 3,
   "total": 16,
   "best": "A tidy loopback REST client with mapped errors, an authenticated websocket, and tests against a fake AO server.",
   "worst": "The README is a copy of the Hermes Agent README and never describes the plugin, and it serves only people who already run the Agent Orchestrator daemon.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 153675,
   "name": "dosbox-mcp",
   "does": "Packages dosbox-automation's MCP bridge for Hermes (started with uvx dosbox-mcp==0.2.4) plus a skill, so the agent can type, read the screen, record media, run Lua and read/write memory in a running DOS emulator.",
   "useful": 2,
   "reliable": 4,
   "polish": 4,
   "creative": 4,
   "beyond": 3,
   "total": 20,
   "best": "The bridge behind it is a tested Python package (about 5,000 lines of code and tests), pinned to an exact version, with a token file instead of a pasted key and an emulator-side mount allowlist.",
   "worst": "The Hermes plugin itself is only a manifest, an mcp.json and a skill; it needs the emulator installed and running separately, and DOS automation is a small audience.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 150998,
   "name": "weft",
   "does": "Edit-time coordination for coding agents: hooks report every edit to a Weft gateway and put other agents' conflicting changes into the agent's tool results, with an enforce mode that blocks stale edits, two tools, /weft and a Desktop pane.",
   "useful": 3,
   "reliable": 4,
   "polish": 4,
   "creative": 5,
   "beyond": 4,
   "total": 24,
   "best": "A genuinely new idea for multi-agent coding, built on pre/post tool-call and transform hooks, with the token read only through get_secret, a trusted-gateway rule so a cloned repo cannot redirect edits, and a large test suite.",
   "worst": "Setup is long (npx gateway, paste a token, set an agent id, open both sessions first), it serves only people running several coding agents on one repo, and the hosted option sends edit diffs off the machine.",
   "standout": false,
   "blocked": null
  }
 ]
}