{
 "batch": "read1-001",
 "plugins": [
  {
   "pr": 0,
   "name": "done-bell",
   "does": "Rings an OS notification and chime and shows a busy/done/needs-you chip in Hermes Desktop when a turn ends or an approval is waiting.",
   "useful": 4,
   "reliable": 3,
   "polish": 3,
   "creative": 2,
   "beyond": 3,
   "total": 18,
   "best": "Small, safe, keyless and genuinely handy: hooks on_session_end and pre_approval_request plus a Desktop status chip and pane.",
   "worst": "Thin: one tool and observer hooks with only 9 tests, and the README install steps hard-code the author's own Windows paths plus a manual pane copy.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 0,
   "name": "homeassistant",
   "does": "Official Home Assistant gateway platform (WebSocket state events in, persistent notifications out) plus four REST tools to list, read and control devices.",
   "useful": 4,
   "reliable": 5,
   "polish": 4,
   "creative": 2,
   "beyond": 5,
   "total": 25,
   "best": "Production-grade: secrets via Hermes's scoped secret store, timeouts everywhere, an operator allow/deny list on entities, and about 176 tests across 6 files.",
   "worst": "Not new: it is the long-standing Home Assistant integration moved out of Hermes core, with no screenshots or Desktop UI.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 151506,
   "name": "call-recorder",
   "does": "Records a call (browser mic, or mic plus system audio on a local or SSH-reachable Linux/Windows machine), transcribes it with faster-whisper and lists recordings and transcripts in a Desktop pane with a composer record button.",
   "useful": 3,
   "reliable": 4,
   "polish": 4,
   "creative": 3,
   "beyond": 4,
   "total": 22,
   "best": "A full Desktop product (composer button, status chip, pane, screenshots) with about 175 tests, path confinement, upload limits and subprocess timeouts.",
   "worst": "It registers no agent tools at all and leans on passwordless SSH, ffmpeg and a remote faster-whisper install; macOS system-audio capture is not implemented, and it records both sides of a call with no consent prompt.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 153015,
   "name": "caduceus-governance",
   "does": "Hooks skill_manage and the skills tree to judge what the agent writes into its own skills, keeping a tamper-evident ledger and reverting or holding unadmitted writes, especially after untrusted web/MCP content entered the session.",
   "useful": 3,
   "reliable": 4,
   "polish": 3,
   "creative": 4,
   "beyond": 4,
   "total": 22,
   "best": "A serious, deterministic guard on self-modifying skills: fail-closed enforce mode, provenance quarantine after untrusted input, sandboxed operator checks, and 340 tests in the repo.",
   "worst": "The catalog folder ships only hooks and UI: the caduceus CLI its README tells operators to use (status, release-effect, device-add) lives outside the plugin folder, the folder itself has no tests, and the jargon-heavy docs make it hard to adopt.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 150150,
   "name": "hermes-wallpaper",
   "does": "Desktop-only plugin that puts a user-chosen image, GIF or video behind the whole Hermes Desktop window, with look and layout controls, a library and a slideshow.",
   "useful": 3,
   "reliable": 4,
   "polish": 5,
   "creative": 2,
   "beyond": 3,
   "total": 20,
   "best": "Finished like a product: banner, three screenshots, status-bar popover, command-palette actions and settings page, with no network, backend or secrets.",
   "worst": "Cosmetic only: it does nothing for the agent, and its testing is a single end-to-end Desktop script.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 151442,
   "name": "pixel-hq",
   "does": "Desktop page that shows a fleet of Hermes profiles as a pixel-art office with XP/HP from a review ledger, live session activity, Kanban blocked-card triage with confirmed actions and a GPU/vLLM reactor panel, plus a pixelhq_review tool.",
   "useful": 3,
   "reliable": 4,
   "polish": 5,
   "creative": 4,
   "beyond": 4,
   "total": 24,
   "best": "Highly polished and creative: demo GIF and video, four screenshots, about 200 tests, and writes limited to confirmed Kanban actions and reviews.",
   "worst": "Its value needs a multi-profile fleet, a Kanban practice and a quality ledger most users do not have; for a single agent it is mostly decoration.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 151750,
   "name": "sentinel",
   "does": "A pre_tool_call policy guard that checks every tool call against built-in rules, user rules and mission scopes, then allows, blocks or routes it to Hermes approval, with a redacted SQLite audit log, file checkpoints and a local Control Room web UI.",
   "useful": 4,
   "reliable": 4,
   "polish": 4,
   "creative": 3,
   "beyond": 4,
   "total": 23,
   "best": "Fails closed when it errors, is honest that it is not an OS sandbox, and ships about 117 Python plus 53 frontend tests, screenshots and thorough docs.",
   "worst": "The Control Room is a separate local web server rather than a Desktop pane, shell-command checks are allowlist word-splitting that can be bypassed, and restore only covers write_file/patch under a single-directory mission.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 149151,
   "name": "hermes-chronos",
   "does": "Snapshots the workspace into a private shadow git repo before risky tools (write_file, patch, terminal, execute_code) run, with tools, a /chronos command and a Desktop pane to diff and roll back.",
   "useful": 4,
   "reliable": 3,
   "polish": 4,
   "creative": 3,
   "beyond": 4,
   "total": 22,
   "best": "Practical undo for agent edits: argv-only git with timeouts, model-initiated rollback routed through Hermes approval, and a readable Desktop pane.",
   "worst": "The manifest and README promise 'speculative branching' that no code implements, there are only 29 tests in 2 files, and it overlaps Hermes's own rewind.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 149243,
   "name": "network-xray",
   "does": "Runs a bounded DNS, TCP, verified TLS and HTTP HEAD probe in a child process, imports the same probe run from another machine, and compares the two stage by stage, with a Desktop workbench page.",
   "useful": 3,
   "reliable": 4,
   "polish": 4,
   "creative": 3,
   "beyond": 3,
   "total": 20,
   "best": "Careful engineering: a sandboxed child process with a hard deadline, about 91 tests with CI, and claims that match the code.",
   "worst": "Niche diagnostics that a terminal skill with curl and dig could largely cover; it can probe private and loopback hosts and does not support Windows.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 153414,
   "name": "hermes-ride",
   "does": "A new Hermes gateway platform: a phone web app mounted on a motorcycle streams voice (ElevenLabs Scribe or offline on-host STT) plus GPS and motion to the agent and speaks replies back.",
   "useful": 3,
   "reliable": 3,
   "polish": 3,
   "creative": 5,
   "beyond": 5,
   "total": 24,
   "best": "Genuinely new: a register_platform adapter that puts Hermes on a moving vehicle, with keys read through get_scoped_secret, constant-time access-key checks with lockout, and about 170 tests.",
   "worst": "Heavy, partly unverified setup: the README admits the locked-phone and Ride Summary paths are untested, the wake word needs a local Emscripten build, the README's ride_character tool is not registered, and the STT helper inherits the full environment.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 153128,
   "name": "attune",
   "does": "Asks the user daily questions about goals and project friction, stores them in SQLite, injects calibration data into every LLM call, and runs owner-approved code proposals' unittests in a Bubblewrap sandbox.",
   "useful": 2,
   "reliable": 3,
   "polish": 2,
   "creative": 3,
   "beyond": 3,
   "total": 16,
   "best": "A careful permission model: only owner slash commands can approve, and test runs use bwrap --unshare-all with cap-drop, rlimits and a deadline, with 102 tests.",
   "worst": "Its tagline overstates the code (no merge; the daily wake only returns a cron request), it adds up to about 3 KB to every LLM call, and its jargon-heavy README has no screenshots or UI.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 152550,
   "name": "brainvault",
   "does": "A Hermes memory provider that remembers locally and syncs cards minted by the user (via their own Wave wallet) on Theta, decrypting private cards with a paired decrypt-only agent key, with a Desktop/dashboard page.",
   "useful": 3,
   "reliable": 3,
   "polish": 4,
   "creative": 4,
   "beyond": 5,
   "total": 24,
   "best": "It replaces Hermes's memory provider with portable memory the owner controls; the plugin never signs or mints, chain reads are keccak-checked, recalled text is labelled as data, and secrets are refused at capture.",
   "worst": "It is tied to one vendor's wallet and chain, the agent key falls back to a 0600 file instead of Hermes's secret store when keyring is absent, install is a manual git clone and copy, and there are only 38 tests.",
   "standout": false,
   "blocked": null
  }
 ]
}