{
 "batch": "read1-039",
 "plugins": [
  {
   "pr": 0,
   "name": "done-bell",
   "does": "Rings an OS notification and optional chime when a Hermes turn ends or an approval is waiting, via session/approval hooks, a /bell command, a status tool and a Desktop status chip.",
   "useful": 4,
   "reliable": 3,
   "polish": 3,
   "creative": 2,
   "beyond": 4,
   "best": "Hooks on on_session_end and pre/post_approval_request plus a Desktop busy/done/needs-you chip give a real lifecycle feature a skill cannot.",
   "worst": "Small test file (9 tests) and a README whose install steps point at the author's own Windows paths and a manual pane copy.",
   "standout": false,
   "blocked": null,
   "total": 20
  },
  {
   "pr": 0,
   "name": "homeassistant",
   "does": "Official Home Assistant gateway platform that forwards HA state-change events to the agent plus four REST tools to list, read and control devices.",
   "useful": 4,
   "reliable": 5,
   "polish": 4,
   "creative": 2,
   "beyond": 5,
   "best": "A full platform adapter with allow/deny entity lists, cooldowns, token declared in requires_env as a password, and about 2,500 lines of tests.",
   "worst": "A port of a long-standing core integration rather than a new idea.",
   "standout": false,
   "blocked": null,
   "total": 25
  },
  {
   "pr": 153370,
   "name": "watch",
   "does": "Fourteen tools that search anime, films and TV, stream them from third-party streaming sites into local mpv and resume where you stopped.",
   "useful": 3,
   "reliable": 3,
   "polish": 3,
   "creative": 3,
   "beyond": 3,
   "best": "Pinned upstream provenance (ani-cli commit and hash, user-built Luffy bridge checked by SHA-256) and a TMDB key kept in Hermes's secret store.",
   "worst": "Depends on scraping unlicensed streaming sites (hianime, VixSrc, LookMovie), is Linux-only and needs a user-built Go bridge for films, so it is fragile and legally risky.",
   "standout": false,
   "blocked": null,
   "total": 18
  },
  {
   "pr": 153017,
   "name": "ideacut",
   "does": "An AI video studio: tools that capture or record public web pages in headless Chromium, build typed-scene storyboards, preview them in a Desktop gallery/editor page and export MP4 with music and voice-over.",
   "useful": 4,
   "reliable": 4,
   "polish": 4,
   "creative": 4,
   "beyond": 4,
   "best": "A real Desktop gallery and editor sharing one renderer with the FFmpeg exporter, with an SSRF-guarding proxy for browser capture and timeouts on every subprocess.",
   "worst": "Heavy dependencies (Playwright, Chromium, FFmpeg) and the README itself says the v1.2 Desktop click-through is unverified and voice-over uses an internal Hermes TTS import.",
   "standout": true,
   "blocked": null,
   "total": 24
  },
  {
   "pr": 153298,
   "name": "honeytrap",
   "does": "Plants decoy credentials in the agent workspace and uses pre/post_tool_call hooks to block, quarantine and alert when any decoy (even encoded or split) appears in a tool call.",
   "useful": 3,
   "reliable": 4,
   "polish": 4,
   "creative": 5,
   "beyond": 4,
   "best": "Honeytoken-based hijack detection with normalisation against base64, hex, zero-width and homoglyph evasion, checked by parametrized tests and a runnable demo.",
   "worst": "Protects only against exfiltration of its own decoys, so its value depends on an attacker going for the planted file, and the quarantine can block legitimate outbound tools until released.",
   "standout": true,
   "blocked": null,
   "total": 24
  },
  {
   "pr": 152184,
   "name": "artifactguard",
   "does": "Statically disassembles pickle/torch/joblib/numpy artifacts to report the globals they would invoke, with a pre_tool_call hook that blocks loads of dangerous files.",
   "useful": 3,
   "reliable": 4,
   "polish": 4,
   "creative": 3,
   "beyond": 4,
   "best": "Never unpickles: an opcode-level abstract interpreter reports exactly which callables an artifact would invoke, backed by 24 tests and a demo video.",
   "worst": "The guard hook only spots load calls by regex in a fixed set of code tools, so loads phrased differently pass unchecked, and the idea overlaps existing picklescan-style scanners.",
   "standout": false,
   "blocked": null,
   "total": 22
  },
  {
   "pr": 154080,
   "name": "relay-telegram",
   "does": "Attaches to the existing Hermes Telegram bot and posts incoming RELAY agent-to-agent calls from a local Unix socket as owner-only Accept/Reject buttons, passing the decision to the separate RELAY Node bridge.",
   "useful": 2,
   "reliable": 2,
   "polish": 2,
   "creative": 3,
   "beyond": 3,
   "best": "Owner-only buttons with a one-time code, sent over a 0600 Unix socket with 2-second timeouts, keep call approval with the person.",
   "worst": "The Hermes part is a thin untested shim with a bare manifest (no kind, env or settings) that regex-reads ~/.hermes/config.yaml and needs a separate Node service installed via curl | bash; its message says 30 seconds while the server defaults to 120.",
   "standout": false,
   "blocked": null,
   "total": 15
  },
  {
   "pr": 153909,
   "name": "fieldkit",
   "does": "Lets Hermes draft and publish offline observation forms, collect entries with photos, voice, GPS and signatures in an offline phone PWA, sync them through a dashboard API and read them back with 12 tools.",
   "useful": 3,
   "reliable": 4,
   "polish": 5,
   "creative": 4,
   "beyond": 4,
   "best": "A finished product: demo video, screenshots, PWA and dashboard tab, publish gated in code on user_approved, and about 67 Python tests plus app and end-to-end tests.",
   "worst": "A very large surface (PWA, service worker, multi-MB bundles) for a niche audience, and the README says model files are checked against pinned SHA-256 hashes although the OCR entries carry none.",
   "standout": false,
   "blocked": null,
   "total": 24
  },
  {
   "pr": 152084,
   "name": "agentygg",
   "does": "A gateway platform that long-polls the hosted Agent'Ygg broker so agents on other harnesses can message and wake this Hermes, with a ygg tool to send messages, hand decisions to the human and fetch files.",
   "useful": 3,
   "reliable": 3,
   "polish": 3,
   "creative": 4,
   "beyond": 5,
   "best": "Strong security design: OAuth held by Hermes via credentialed_provider_request, default-deny senders, exec approvals from peers refused and decisions routed to the human.",
   "worst": "By its own README sign-in fails on current Hermes 0.23.0 until an unmerged core fix lands, and it depends on a third-party hosted broker.",
   "standout": false,
   "blocked": null,
   "total": 23
  },
  {
   "pr": 150140,
   "name": "waiting-on-you",
   "does": "Adds /waiting and hermes waiting, which read every profile's session store read-only and list the unanswered questions your bots ended their replies with, merged and oldest first.",
   "useful": 3,
   "reliable": 4,
   "polish": 3,
   "creative": 4,
   "beyond": 3,
   "best": "Read-only SQLite access (mode=ro, 2-second timeout) with a privacy default that limits messaging chats to their own profile, plus privacy tests.",
   "worst": "Detection is a heuristic on English and Indonesian phrasing, and with no tools or hooks it is a reporting command only.",
   "standout": false,
   "blocked": null,
   "total": 20
  },
  {
   "pr": 152968,
   "name": "wavebots",
   "does": "Verifies Wave bot listings on the Theta blockchain and installs each as a locked-down Hermes profile, with a Desktop/dashboard store tab and an optional paid ask_wave call to Wave OS.",
   "useful": 2,
   "reliable": 4,
   "polish": 4,
   "creative": 4,
   "beyond": 4,
   "best": "Wave OS key read only via Hermes secret_scope, every add/update/remove/ask goes through the approval prompt and is refused in scheduled jobs, with 27 tests.",
   "worst": "Serves a niche chain and store, starts a network re-check thread on load, and the README and dashboard docstring say nothing is paid or sent to Wave although ask_wave can spend TFUEL.",
   "standout": false,
   "blocked": null,
   "total": 22
  },
  {
   "pr": 154062,
   "name": "omnisight",
   "does": "Registers four layout-inspection tools that claim to read live pages over Chrome DevTools, but every call returns the same hard-coded synthetic scene.",
   "useful": 1,
   "reliable": 1,
   "polish": 2,
   "creative": 2,
   "beyond": 1,
   "best": "Declares its tools, a Desktop entry and settings cleanly in a full manifest.",
   "worst": "Claims more than the code does: inspect_surface ignores target_url and always returns mock_surface_scene data, and there is no CDP connection at all, so the agent gets invented defects and source lines.",
   "standout": false,
   "blocked": null,
   "total": 8
  }
 ]
}