{ "batch": "read1-121", "plugins": [ { "pr": 0, "name": "done-bell", "does": "Rings an OS notification and optional chime when a Hermes turn ends and shows a busy/done/needs-you status chip in CLI and Desktop.", "useful": 3, "reliable": 3, "polish": 2, "creative": 2, "beyond": 3, "total": 16, "best": "One small design covers CLI hooks, approval 'needs you' state and a Desktop status chip, with no keys and approval text never stored.", "worst": "Rough finish: README install path is the author's own Windows folder, catalog sha is a REPLACE placeholder, and the declared config_schema (muted, sound) is never read by the code.", "standout": false, "blocked": null }, { "pr": 0, "name": "homeassistant", "does": "Official Nous plugin adding a Home Assistant gateway platform (WebSocket state_changed events to the agent) plus four REST tools to list, read and call device services.", "useful": 4, "reliable": 4, "polish": 4, "creative": 2, "beyond": 5, "total": 24, "best": "Secrets come only through Hermes's secret store (get_secret/get_scoped_secret, HASS_TOKEN marked password) with strict domain/service validation and about 176 tests.", "worst": "ha_call_service can unlock locks or disarm alarms with no human approval unless the user opts into allow/deny lists, and it is a port of a former core feature, not a new idea.", "standout": false, "blocked": null }, { "pr": 151418, "name": "bonsai-garden", "does": "A Desktop-only page that draws a pixel-art garden with one bonsai per agent profile, showing busy state, cost and cron routines, and lets the user open or interrupt an agent.", "useful": 2, "reliable": 4, "polish": 3, "creative": 4, "beyond": 4, "total": 21, "best": "Original artwork wired to real per-profile Desktop SDK state, honest 'Unavailable' fallbacks and 25 node tests including a build-matches-source check.", "worst": "Mostly decorative value, Linux-only with a manual copy deploy, and a README that reads like internal notes with a local /home path.", "standout": false, "blocked": null }, { "pr": 151074, "name": "hermes-gatekeeper", "does": "A deterministic pre_tool_call gate that checks outbound message sends against suppression/STOP, consent, recipient quiet hours, double-texting and approved wording, escalating unparsed sends to owner approval.", "useful": 3, "reliable": 5, "polish": 3, "creative": 4, "beyond": 4, "total": 23, "best": "Rigorous fail-closed design (log, commit or classifier failure blocks the send) with hashed recipient storage, 0600 SQLite and 19 test files.", "worst": "In practice it fully checks only literal 'hermes send' / 'imsg send' terminal calls, the README is dense with no screenshots, and the catalog entry sha is TBD.", "standout": false, "blocked": null }, { "pr": 153050, "name": "mandate", "does": "Learns a least-privilege policy from an unattended cron job's tool calls and, after a human approves it, blocks off-policy calls at the argument level in pre_tool_call.", "useful": 3, "reliable": 5, "polish": 5, "creative": 4, "beyond": 4, "total": 25, "best": "Fails closed with adversarial shell/path/host escape tests, a real-Hermes cron proof and a recorded-traffic benchmark, plus a read-only Desktop page.", "worst": "Narrow audience (unattended cron users), a policy learned from an already-compromised run would be trusted, and the README's test count is inconsistent (162 vs 122).", "standout": true, "blocked": null }, { "pr": 149624, "name": "api-architect", "does": "Compiles OpenAPI, Swagger 2 or Postman specs into a stored manifest and then makes schema-checked HTTP calls against it with secret-slot credentials.", "useful": 3, "reliable": 2, "polish": 2, "creative": 3, "beyond": 3, "total": 16, "best": "Keys come only from Hermes's secret scope with redaction and a private-network guard, backed by about 249 parser/guard tests.", "worst": "The README promises non-GET calls 'always require interactive approval' and fail under cron, but the only gate is a confirm flag the model sets itself and there is no unattended check; the README is marked work-in-progress with no setup.", "standout": false, "blocked": null }, { "pr": 153764, "name": "hype", "does": "/hype turns the current session into a launch trailer rendered locally with headless Chromium, ffmpeg, composed music and optional Blender, with a Desktop studio.", "useful": 3, "reliable": 4, "polish": 5, "creative": 5, "beyond": 4, "total": 25, "best": "Ambitious, product-grade pipeline with a Desktop studio, consented SHA-pinned Blender download, network-off capture and over a thousand tests.", "worst": "Heavy dependencies (Chromium, ffmpeg) and no cost cap or confirmation before a Directed film the README itself puts at several dollars of model usage.", "standout": false, "blocked": null }, { "pr": 152261, "name": "ship", "does": "Configuration that points Hermes at ShipStatic's hosted MCP server so the agent can publish static sites and get a shareable link, with no account needed.", "useful": 3, "reliable": 3, "polish": 3, "creative": 2, "beyond": 2, "total": 15, "best": "Zero-setup publishing with no API key: OAuth is handled by Hermes and the server is marked untrusted.", "worst": "A single MCP config entry whose real behaviour lives on a hosted server not in the repo; no tests cover the Hermes package, and anonymous uploads go public for days.", "standout": false, "blocked": null }, { "pr": 153912, "name": "myfolks", "does": "An encrypted store of facts about the people in your life, answered word for word by deterministic code in a gateway hook without calling the model, with Google contacts sync and a Desktop page.", "useful": 4, "reliable": 4, "polish": 5, "creative": 4, "beyond": 4, "total": 25, "best": "Deterministic, private recall that bypasses the model and transcript, with Hermes-managed OAuth, atomic encrypted writes and about 34 test files.", "worst": "The AES key sits in a 0600 file next to the store unless keyring is installed, so a copy of the Hermes folder opens it (disclosed in the README).", "standout": false, "blocked": null }, { "pr": 149946, "name": "birta", "does": "Sixteen SKILL.md files plus an MCP entry for Birta's hosted commercial service for publishing, sharing and reviewing pages.", "useful": 2, "reliable": 2, "polish": 3, "creative": 2, "beyond": 2, "total": 13, "best": "Well-written design and writing guidance across its skills.", "worst": "No code or tests, the shipped MCP entry cannot sign in so the user must run 'hermes mcp add' by hand, and a skill tells the agent to use Birta even when the user does not name it.", "standout": false, "blocked": null }, { "pr": 152504, "name": "benchforge", "does": "Compiles AI-written Arduino sketches with a pinned arduino-cli, runs them on an emulated ATmega328P against crash checks, has the model fix them until they pass, and blocks flashing firmware without a passing receipt.", "useful": 3, "reliable": 4, "polish": 5, "creative": 5, "beyond": 4, "total": 25, "best": "Verifiable proof that firmware ran on a simulated chip, with hash-locked checks the model cannot change and a fail-closed flash gate; it puts Hermes on people's hardware.", "worst": "Narrow maker audience, and the flash gate inspects only the terminal tool by regex, which the code itself calls a seatbelt rather than a wall.", "standout": true, "blocked": null }, { "pr": 153768, "name": "hermes-hands", "does": "A terminal backend that runs Hermes's terminal and file tools on a paired Windows or Linux computer over a signed outbound relay, with a witness mode where the person at that computer consents and watches.", "useful": 3, "reliable": 3, "polish": 3, "creative": 4, "beyond": 5, "total": 23, "best": "Changes where Hermes runs, with the relay seed in Hermes's secret store, stripped from subprocesses, signed receipts and a real device+relay e2e test.", "worst": "Heavy setup (pipx from git, HTTPS relay), relies on private Hermes internals, and witness mode blocks all device tools if any other plugin registers a pre_tool_call hook.", "standout": false, "blocked": null } ] }