{
  "batch": "read1-131",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Notifies the user when a Hermes turn finishes and exposes busy, done, and approval-waiting status in Desktop.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "total": 22,
      "best": "It combines session and approval hooks with a usable Desktop status chip, controls, and local state.",
      "worst": "Its benefit is narrowly a notification convenience and the documented Desktop installation includes a manual copy workaround.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Adds a Home Assistant gateway platform and four tools for querying and controlling smart-home devices.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "It is a thoroughly tested platform integration with event delivery, device controls, and allow/deny safeguards.",
      "worst": "It remains useful only to people who run Home Assistant and must provision a long-lived access token.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149562,
      "name": "sealed",
      "does": "Provides an AES-256-GCM encrypted local secret store through Hermes's SecretSource interface and a management CLI.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "Its secret-source integration uses authenticated encryption, atomic 0600 writes, fail-closed errors, and focused crypto and permission tests.",
      "worst": "The encryption key resides on the same host as the store, so it does not protect against a compromised user account.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 150570,
      "name": "zalodesk",
      "does": "Connects Hermes to ZaloDesk's hosted OAuth MCP service for Zalo inbox, messaging, and team-management actions.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 3,
      "beyond": 3,
      "total": 17,
      "best": "The manifest marks the remote server untrusted, so sensitive message, access, and credit actions use Hermes approval controls.",
      "worst": "The pinned package is only an npx remote-MCP launcher and skill, with no implementation or tests for the hosted tools it claims.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150026,
      "name": "inventory-reminder",
      "does": "Indexes a cached host inventory and gives Hermes tools to search installed capabilities or summarize the machine's state.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 4,
      "total": 23,
      "best": "It supplies a genuinely useful host-awareness surface with read-only cached lookups, clean unavailable results, and broad fixture coverage.",
      "worst": "Its answers are only as current and complete as an externally scheduled inventory refresh, rather than live host state.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153144,
      "name": "signet",
      "does": "Makes an exact reviewed email fingerprint a one-use human seal before dispatching mail, with holding, ledger, and direct-mailer guards.",
      "useful": 4,
      "reliable": 5,
      "polish": 5,
      "creative": 5,
      "beyond": 5,
      "total": 29,
      "best": "It enforces byte-bound human approval across Hermes surfaces, fails closed in YOLO and unattended cases, and backs the design with extensive tests and real-session visuals.",
      "worst": "Its direct-mailer interception is explicitly a best-effort pattern guard rather than a sandbox against a determined agent.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153797,
      "name": "dioramic",
      "does": "Turns a validated structured scene specification into a Blender-rendered vertical video and supports iterative scene tweaks.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 4,
      "total": 24,
      "best": "It converts model output to bounded data rather than Blender code, scrubs the render environment, limits resources, and includes demos and render tests.",
      "worst": "It requires a local Blender installation and rendering hardware, which makes the otherwise polished workflow a niche, heavyweight setup.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150016,
      "name": "mflow",
      "does": "Registers mFlow's hosted MCP service and a workflow skill for boards, knowledge-base work, and coding-agent delegation.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 3,
      "beyond": 3,
      "total": 17,
      "best": "The documentation candidly describes the OAuth alternative, destructive-operation confirmation, and current PAT limitation.",
      "worst": "The package contains no working local implementation or tests, and its bundled token path depends on PAT support that the README says is not yet available.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153058,
      "name": "stagehands",
      "does": "Adds a delegation provider that routes subagent work to typed, token-budgeted worker roles and includes context-hygiene controls.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 5,
      "beyond": 5,
      "total": 27,
      "best": "It changes Hermes's delegation routing with a zero-config worker roster, bounded routes, fail-closed unknown-worker handling, and provider contract tests.",
      "worst": "Its default worker routes depend on particular external model identifiers, so live provider availability and cost are outside its tested contract.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 152848,
      "name": "earnfi",
      "does": "Connects Hermes to a hosted marketplace and payment MCP service, with diagnostics, commands, and workflow skills for work and escrow flows.",
      "useful": 2,
      "reliable": 3,
      "polish": 5,
      "creative": 4,
      "beyond": 4,
      "total": 22,
      "best": "It has unusually complete operational and security documentation, secret-schema fields, diagnostics, and an untrusted MCP posture for writes and payments.",
      "worst": "Core job, escrow, and payment behavior remains a large uninspectable hosted MCP surface, making reliability hard to establish from the pinned code.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152640,
      "name": "hephaestus",
      "does": "Lets an agent draft a Hermes plugin, validates and installs it disabled, presents a consent card, and supports rollback.",
      "useful": 4,
      "reliable": 1,
      "polish": 5,
      "creative": 5,
      "beyond": 5,
      "total": 25,
      "best": "The checked-draft hash gate, disabled installation, rollback flow, Desktop consent card, and comprehensive lifecycle tests are an ambitious native product.",
      "worst": "When approvals are disabled or YOLO is used, forge_check can import and execute an agent-authored draft unsandboxed, while the documented guard has acknowledged bypasses.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149757,
      "name": "epoch",
      "does": "Uses Kanban claim and completion hooks to make calibrated time estimates, post them to the board, and record actual duration to a local Epoch ledger.",
      "useful": 4,
      "reliable": 5,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 28,
      "best": "It is a deeply engineered feedback loop with shared run bindings, replayable outbox work, scrubbed child environment, concurrency handling, tests, and clear visuals.",
      "worst": "First use depends on downloading a pinned npm CLI through npx, so offline or restrictive npm policy delays estimation until a retry succeeds.",
      "standout": true,
      "blocked": null
    }
  ]
}