{ "batch": "read1-108", "plugins": [ { "pr": 0, "name": "done-bell", "does": "Adds turn-completion and approval notifications, a chime, and a Desktop status chip with mute controls.", "useful": 4, "reliable": 3, "polish": 3, "creative": 2, "beyond": 4, "best": "Connects real turn and approval events to unobtrusive Desktop and operating-system notifications without credentials.", "worst": "Installation instructions require a developer-specific Windows path and manual Desktop copying, while tests cover Python helpers rather than Desktop notification behavior.", "standout": false, "blocked": null, "total": 20 }, { "pr": 0, "name": "homeassistant", "does": "Connects Hermes to Home Assistant through device-control tools, filtered state-change gateway events, and notification delivery.", "useful": 4, "reliable": 4, "polish": 4, "creative": 3, "beyond": 5, "best": "Combines an event-driven gateway platform with scoped credentials, entity access filters, dangerous-service blocking, and extensive regression tests.", "worst": "Entity restrictions are opt-in and WebSocket handshake receives have no explicit per-message timeout, limiting the safety and bounded-setup guarantees.", "standout": false, "blocked": null, "total": 25 }, { "pr": 150258, "name": "postsider", "does": "Packages a hosted PostSider MCP connection and workflow skill for social-media drafts, scheduling, publishing, and analytics.", "useful": 3, "reliable": 2, "polish": 3, "creative": 2, "beyond": 3, "best": "Marks the MCP server untrusted and clearly discloses publishing effects, costs, remote tool changes, and draft-first workflows.", "worst": "The submission contains configuration and a skill rather than server code or tests, and its bundled mcp-remote path stores OAuth tokens outside Hermes under ~/.mcp-auth.", "standout": false, "blocked": null, "total": 16 }, { "pr": 151267, "name": "makeirl", "does": "Connects Hermes to a hosted MCP service for KiCad manufacturing-readiness checks and browser checkout links.", "useful": 3, "reliable": 3, "polish": 3, "creative": 3, "beyond": 3, "best": "Uses an untrusted server declaration, Hermes-managed OAuth setup, and a clear distinction between manufacturing-rule checks and actual circuit correctness.", "worst": "The bundled server declaration cannot authenticate on its own; users must add OAuth manually, and no checker implementation or tests are included at the pin.", "standout": false, "blocked": null, "total": 18 }, { "pr": 153483, "name": "glassbox", "does": "Adds a macOS Seatbelt terminal backend with filesystem and network policies, file-tool preflight checks, and local audit reports.", "useful": 4, "reliable": 1, "polish": 4, "creative": 4, "beyond": 5, "best": "Extends Hermes at the terminal-provider layer so shell and file tools share containment, with inspection commands, a self-test, and an HTML audit timeline.", "worst": "provider.py writes profile.sb inside run_dir and passes that same directory as writable scratch to the policy, allowing a sandboxed command to alter the profile reused for subsequent commands.", "standout": false, "blocked": null, "total": 23 }, { "pr": 152843, "name": "delivery-gate", "does": "Runs declared task checks through Hermes terminal dispatch and returns a RELEASE or BLOCK verdict with hash-linked evidence records.", "useful": 4, "reliable": 3, "polish": 3, "creative": 3, "beyond": 3, "best": "The pinned revision routes checks through Hermes approvals and the configured terminal backend, disables local execution by default, and tests failures, timeouts, and evidence linking.", "worst": "No hook enforces delivery blocking: the agent must choose to call the tool, and evidence reads do not verify the stored record hash or chain.", "standout": false, "blocked": null, "total": 19 }, { "pr": 152862, "name": "emailfig", "does": "Connects Hermes to EmailFig’s hosted MCP server for contact management, campaign analytics, and campaign drafts.", "useful": 3, "reliable": 2, "polish": 3, "creative": 2, "beyond": 3, "best": "The untrusted MCP declaration preserves write approvals, and the documentation clearly discloses contact changes that can trigger emails or automations.", "worst": "Only two configuration files are submitted, without server code or tests, and the bundled bridge keeps OAuth tokens in ~/.mcp-auth rather than Hermes’s secret store.", "standout": false, "blocked": null, "total": 16 }, { "pr": 152764, "name": "redactgate", "does": "Pseudonymizes detected personal data in model requests and restores values in replies and selected tool arguments, with local audit and inspection commands.", "useful": 4, "reliable": 4, "polish": 5, "creative": 4, "beyond": 5, "best": "Integrates request middleware, output restoration, per-session vaults, fail-closed handling, and real Hermes integration tests into an offline privacy layer.", "worst": "Auxiliary model calls can still carry raw personal data, and rule-based detection misses unfamiliar names without cues, so the headline privacy guarantee is broader than the implemented coverage.", "standout": true, "blocked": null, "total": 27 }, { "pr": 149398, "name": "homegrown", "does": "Lets Hermes build persistent HTML mini-apps with per-app SQLite records, version rollback, and live Desktop/chat rendering.", "useful": 5, "reliable": 1, "polish": 4, "creative": 4, "beyond": 5, "best": "Turns one-off generated apps into persistent, agent-accessible tools with independent data, reversible code changes, and live updates from any chat platform.", "worst": "Its CSP injection matches
and commented or late tags, so generated app code can run before the promised network restriction is active.", "standout": false, "blocked": null, "total": 24 }, { "pr": 153762, "name": "flower-shop", "does": "Adds a local business workspace for orders, inventory, production, deliveries, financial records, and approval queues, with a Hermes Desktop interface.", "useful": 3, "reliable": 2, "polish": 5, "creative": 4, "beyond": 4, "best": "A shared transactional SQLite service layer connects agent tools to a complete Desktop workspace with onboarding, inline approval cards, and extensive business-workflow tests.", "worst": "With chat approvals enabled by default, flowershop_decide_approval accepts any nonempty model-supplied owner_statement and executes as owner(chat), so human authorization is asserted rather than verified.", "standout": false, "blocked": null, "total": 22 }, { "pr": 153562, "name": "multi-telegram", "does": "Runs multiple Telegram bot identities through one Hermes profile with per-bot authorization, shared or isolated transcripts, and reply routing.", "useful": 4, "reliable": 4, "polish": 4, "creative": 3, "beyond": 5, "best": "Implements a genuine gateway platform with profile-scoped token access, explicit transport routing, per-bot authorization, bounded startup, and tests for concurrent replies and session sharing.", "worst": "Isolated transcripts still share profile memory and tools, and the validation report leaves live unauthorized-user, group, concurrency, and media checks pending.", "standout": false, "blocked": null, "total": 25 }, { "pr": 149959, "name": "spanwall", "does": "Adds a Desktop Kanban wall across Hermes profiles with live session states, request approvals, inline replies, steering, and task creation.", "useful": 5, "reliable": 3, "polish": 5, "creative": 3, "beyond": 5, "best": "Makes several running agents manageable from one SDK-based Desktop surface while keeping approval decisions as explicit user actions routed to the owning gateway.", "worst": "No automated tests are included for its large Desktop implementation, and polling every watched profile every three seconds can start additional backends.", "standout": true, "blocked": null, "total": 26 } ] }