{
  "batch": "read1-105",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Notifies users when Hermes finishes a turn or waits for approval, with Desktop status and mute controls.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Lifecycle hooks and a Desktop busy-state watcher make notifications work across terminal and gateway sessions.",
      "worst": "The README uses a developer-specific Windows install path and manual pane copying; tests cover backend state but not Desktop notification delivery.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant events, device-control tools and scheduled notifications.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A native gateway adapter combines filtered event subscriptions, reconnect handling, scoped secrets and tested service-target restrictions.",
      "worst": "Entity restrictions are opt-in, and the default token-backed service interface remains broad for physical-device control.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153690,
      "name": "keychain",
      "does": "Resolves Hermes credentials from macOS Keychain at startup and offers migration, inventory and audit tools.",
      "useful": 4,
      "reliable": 2,
      "polish": 3,
      "creative": 3,
      "beyond": 5,
      "total": 22,
      "best": "Uses the native SecretSource extension and verifies stored credentials before removing dotenv values.",
      "worst": "Despite native SecretSource integration, migration directly reads dotenv credentials contrary to catalog rule 11, strips only the first duplicate definition and retains plaintext backups.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152656,
      "name": "shipwrit",
      "does": "Checks deployment HTTP journeys, records redacted receipts and nudges Hermes to verify releases before claiming success.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "total": 22,
      "best": "Multi-step capture-and-lookup checks distinguish a healthy endpoint from a working user outcome, with focused tests and explicit scope limits.",
      "worst": "Any passing receipt clears the project pending marker without binding it to the attempted deployment target or revision; the finish hook only nudges once.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153343,
      "name": "worktree-sandbox",
      "does": "Adds a Git-worktree terminal backend, reversible promotion and parallel verification of competing implementations.",
      "useful": 5,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "Changes the actual execution backend and combines conflict-checked promotion, backups, verification hooks and a Desktop race leaderboard.",
      "worst": "Commands retain access to absolute host paths, so the worktree and environment filtering do not enforce the README claim that the original checkout cannot be mutated.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 151709,
      "name": "pit-crew",
      "does": "Monitors connected cars, plans charging readiness and executes policy-checked commands through Hermes approval integration.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 26,
      "best": "A simulator, proactive watcher, scoped credentials, fresh-motion checks and command readback form a substantial hardware integration.",
      "worst": "Direct Tesla and non-Tesla profiles have limited live validation, and approval-class commands can run without a fresh human answer when Hermes approvals are disabled.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153582,
      "name": "hermes-ui",
      "does": "Replaces Hermes Desktop and Webapp chat with a bot-oriented workspace, rich interactive replies and integrated approvals.",
      "useful": 5,
      "reliable": 3,
      "polish": 5,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A shipped Desktop bundle implements streaming conversations, per-bot models, attachments, shortcuts and structured interactive replies with extensive interface checks.",
      "worst": "File-preview routes allow most files throughout the user home via a narrow secret-name denylist, and credential lookup falls back after scoped-secret errors.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151281,
      "name": "tironian",
      "does": "Learns recurring Hermes tasks from session history, trains small models and routes qualified requests through validated local students.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 5,
      "beyond": 5,
      "total": 27,
      "best": "Connects real training and per-step held-out promotion gates to native LLM middleware with sticky teacher fallback and automatic demotion.",
      "worst": "Useful training requires enough repeated good sessions and GPU setup; student replies are read without a response-size cap and validation cannot establish semantic correctness.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 151981,
      "name": "visual-oracle",
      "does": "Captures stable browser screenshots, pixel-diffs baselines and nudges Hermes on unexpected visual changes.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "total": 22,
      "best": "Dependency-free image comparison includes separate change regions, masks, declared-change contracts and focused browser and decoder tests.",
      "worst": "The verification hook only notices stored FAIL or REVIEW verdicts, so a capture error after a prior PASS leaves no failing gate; Chrome sandboxing may also be disabled automatically.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152865,
      "name": "hermes-village",
      "does": "Runs a persistent village simulation in Hermes Desktop, with model-planned councils and free deterministic progression.",
      "useful": 2,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 4,
      "total": 23,
      "best": "Ships a complete interactive game, deterministic action validation, transactional saves and a council budget gate backed by broad simulation tests.",
      "worst": "Its main benefit is entertainment rather than improving everyday agent work, and council budget admission relies on estimated input-token counts.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153946,
      "name": "iolite",
      "does": "Shortlists models by capability and cost, measures local usage and displays an agent-controlled model landscape.",
      "useful": 4,
      "reliable": 4,
      "polish": 5,
      "creative": 3,
      "beyond": 4,
      "total": 24,
      "best": "Works offline with bundled attributed data and integrates personal plan pricing, local measurements and acknowledged Desktop controls.",
      "worst": "Benchmark-derived intelligence is a proxy for a user task, and fast ranking favors intelligence rather than speed until all candidates have speed measurements.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152779,
      "name": "publora",
      "does": "Connects Hermes to Publora social publishing through hosted MCP and nine platform-specific skills.",
      "useful": 3,
      "reliable": 3,
      "polish": 3,
      "creative": 1,
      "beyond": 2,
      "total": 14,
      "best": "Documents OAuth setup, outbound post-content disclosure and untrusted-server approval configuration without storing credentials locally.",
      "worst": "The pinned package contains no publishing implementation or automated tests; almost all functionality is hosted MCP plus skills, and native OAuth setup requires manually restoring untrusted status.",
      "standout": false,
      "blocked": null
    }
  ]
}