{
  "batch": "read1-139",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Notifies users when Hermes finishes a turn or needs approval, with a Desktop status chip, chime and recent-event pane.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Hooks and Desktop busy-state observation provide useful notifications without API keys or exposing approval commands.",
      "worst": "Installation instructions use an author-specific Windows path and require manually copying the Desktop pane; tests cover backend behavior but not Desktop notification delivery.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant through four device tools, a filtered WebSocket event gateway and cron notification delivery.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "Profile-scoped secrets, bounded requests, reconnect backoff and detailed service-policy regression tests support a substantial platform integration.",
      "worst": "Entity restrictions are opt-in and a domain blocklist cannot constrain everything an allowed scene, script or automation does on the Home Assistant server.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153383,
      "name": "film-suite",
      "does": "Adds a Desktop film workstation with shared script, media generation, audio analysis, timeline editing and queued rendering tools.",
      "useful": 4,
      "reliable": 3,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 26,
      "best": "The artist and agent edit the same durable project through revision-checked routes, with undo and exports to professional editing formats.",
      "worst": "The pinned distribution excludes tests, relies on private Hermes authentication imports and direct Desktop bridge access, and documents Windows-only testing.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153994,
      "name": "taster",
      "does": "Runs a native plugin once in a macOS sandbox with canary files and environment variables, then reports observed behavior against its declarations.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 4,
      "beyond": 3,
      "total": 21,
      "best": "Tests exercise real-home denial, canary access, forged reports and several environment-read evasions, and the report explicitly avoids declaring a plugin safe.",
      "worst": "Only macOS is supported, tools are probed with empty arguments, and the target shares the Python monitor process, allowing unobserved paths or monitor tampering.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149738,
      "name": "trust-ladder",
      "does": "Persists user corrections as tool guards, write checks, injected rules or approval requests, and tracks tasks against terminal verifiers.",
      "useful": 5,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "Five public hooks enforce corrections across sessions, while regression tests cover stale verifier results, concurrent catches, redaction and rule-evaluation costs.",
      "worst": "Pattern matching can miss aliases or script indirection, hook failures allow calls through, and model-added rules can over-block despite passing example checks.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153877,
      "name": "hook-desk",
      "does": "Packages two skills for analyzing pasted social-post openings and drafting sourced hooks using conversation-local voice rules.",
      "useful": 3,
      "reliable": 4,
      "polish": 3,
      "creative": 2,
      "beyond": 1,
      "total": 14,
      "best": "The skills clearly distinguish supplied metrics from verified facts and keep source links attached to reusable hook formulas.",
      "worst": "It consists entirely of prompts, with no tools, automation or durable formula storage beyond text the user copies between conversations.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153923,
      "name": "corpus-open",
      "does": "Adds local court-case tools, citation annotations, source-document and quotation guards, deadline briefs and a Desktop case pane.",
      "useful": 3,
      "reliable": 2,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 24,
      "best": "Case-aware hooks check quotations against registered documents before supported writes and keep citation findings and deadline confidence visible, with extensive regression fixtures.",
      "worst": "The native plugin falls back from Hermes secrets to a CourtListener token stored in a separate file, violating catalog rule 11; quotation guards also deliberately pass uncheckable content.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153623,
      "name": "sharelet",
      "does": "Publishes explicitly selected Hermes or MCP tools as expiring, revocable browser links with bounded guest inputs and run quotas.",
      "useful": 4,
      "reliable": 2,
      "polish": 5,
      "creative": 5,
      "beyond": 5,
      "total": 26,
      "best": "Creator approvals bind the reviewed tool contract, and tests cover revocation during queued dispatch, changed grants, destructive-tool rejection and separate owner/guest listeners.",
      "worst": "Optional image recipes store keys outside Hermes secrets, public links default to an author-operated relay, and cloudflared is fetched from mutable releases/latest with a digest supplied by that same response.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150598,
      "name": "podcast",
      "does": "Turns structured scripts into multi-host MP3 episodes with speech synthesis, mastering, chapters, transcripts and a daily-briefing blueprint.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 3,
      "total": 21,
      "best": "Production code implements paced synthesis retries and speaker-aware mixing, and an ffprobe-based test checks the actual mastered audio metadata and chapters.",
      "worst": "Speech depends on Microsoft Edge online TTS, and without ffmpeg the fallback loses mastering, pauses and embedded chapters; there is no Desktop production interface.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151822,
      "name": "nektar",
      "does": "Supplies a Node installer intended to register an external nektar MCP memory-market server from a local JavaScript path or Docker image.",
      "useful": 2,
      "reliable": 1,
      "polish": 2,
      "creative": 2,
      "beyond": 3,
      "total": 13,
      "best": "The installer offers both local-server and Docker registration paths, and the README distinguishes test coins from real BSV.",
      "worst": "No native entrypoint or portable MCP package is shipped, the setup key is not executed by Hermes, and manual installation defaults to an unpinned latest image without a declared untrusted spending gate.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151137,
      "name": "on-brand",
      "does": "Adds brand profiles, deterministic copy linting, model-assisted repairs, outbound posting guards and a Desktop monitoring pane.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 23,
      "best": "Three hooks put brand checks into the agent workflow, repairs are re-linted within a shared time budget, and tests include loading through Hermes PluginManager.",
      "worst": "The guarantee exceeds enforcement: default reply checks require recognized fenced blocks, outbound checks depend on tool names and known text keys, and streaming is held only when explicitly enabled.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152192,
      "name": "better-analyst",
      "does": "Connects Hermes to a hosted PDF-to-Excel MCP service through a pinned mcp-remote bridge and an extraction workflow skill.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 1,
      "beyond": 3,
      "total": 16,
      "best": "The package explicitly marks its server untrusted so write-capable conversion calls require approval, and documents credits, uploads and sign-in limits.",
      "worst": "Converter code and tests are absent from the pin, the server supplies tools dynamically, and OAuth uses the bridge token cache in ~/.mcp-auth instead of Hermes-managed authentication.",
      "standout": false,
      "blocked": null
    }
  ]
}