{
  "batch": "read1-142",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Notifies users when Hermes finishes a turn or needs approval, with a Desktop status chip and mute controls.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Real lifecycle hooks and Desktop busy-state monitoring make unattended work easier to follow.",
      "worst": "Setup uses an author-specific Windows path and manual pane copying; tests cover Python state but not the Desktop notification path.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant device state, service control, event-driven gateway messages and cron notifications.",
      "useful": 4,
      "reliable": 5,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 26,
      "best": "A complete platform adapter combines reconnects, cooldowns, scoped secrets and extensively tested service and entity restrictions.",
      "worst": "Entity allowlists are opt-in, and allowed scripts or scenes can have effects beyond the explicitly named entity.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153386,
      "name": "data-saver",
      "does": "Forecasts command download sizes, gates expensive downloads and meters network usage against configurable data budgets.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 4,
      "beyond": 4,
      "total": 23,
      "best": "Registry size forecasts and approval middleware address a concrete problem for users on metered connections.",
      "worst": "The ledger stores raw command or URL prefixes without redaction, potentially retaining embedded secrets; system-wide counters also limit attribution accuracy.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153501,
      "name": "hermes-vnc",
      "does": "Provides a VNC computer-use backend and optional Desktop live viewer for controlling another computer through Hermes.",
      "useful": 4,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "Native computer-use integration, scoped password lookup and scripted RFB fault tests make remote hardware control unusually complete.",
      "worst": "A handshake timeout raises before retaining or closing the pending connection, and text input remains limited to ASCII or Latin-1 clipboard transfer.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153872,
      "name": "local-scout",
      "does": "Locally masks detected personal data and secrets in Hermes text paths, flags injection and optionally answers calibrated ticket classifications without a model call.",
      "useful": 4,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 27,
      "best": "Consent-controlled middleware changes actual provider payloads, with broad regression coverage and candid detector-quality documentation.",
      "worst": "Masking is irreversible and incomplete, can withhold user image messages, and does not prevent transfer of the underlying unmasked files.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 153102,
      "name": "z-midi-console",
      "does": "Builds a Desktop MIDI control surface with hardware learning, modulation, recording, MIDI export and agent-operated controls.",
      "useful": 3,
      "reliable": 2,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 24,
      "best": "A substantial hardware engine and editable multi-device UI integrate live controls, modulation and recording.",
      "worst": "The chat endpoint obtains raw provider credentials through resolve_runtime_provider and constructs subscription Authorization headers instead of using the catalog-required credentialed_provider_request route.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150221,
      "name": "bulkpublish",
      "does": "Connects Hermes to BulkPublish’s hosted social publishing MCP service and supplies workflow skills.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 2,
      "beyond": 3,
      "total": 18,
      "best": "The portable manifest explicitly marks the remote server untrusted, supporting human approval for write tools.",
      "worst": "The pinned deliverable contains configuration and skills only, with no server implementation or automated tests to substantiate the advertised remote capabilities.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153339,
      "name": "recloc",
      "does": "Sends address-bearing brrr notifications for an iPhone Shortcut to create location-triggered Apple Reminders.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 3,
      "beyond": 3,
      "total": 17,
      "best": "It keeps live geofence monitoring on the phone and distinguishes push acceptance from confirmed delivery.",
      "worst": "The promised address redaction returns addresses of 28 characters or fewer unchanged, while reminder listing always returns an empty list and cancellation cannot recall delivery.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 154019,
      "name": "so101-arm",
      "does": "Gives Hermes named robot-arm operations, simulated vision and rehearsal, plus fault detection and repair through a local SO-101 host.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 5,
      "beyond": 4,
      "total": 25,
      "best": "Simulation rehearsal and a deterministic watchdog produce a distinctive inspect-correct-repair loop with integration tests and visual demonstrations.",
      "worst": "The real-arm driver is only mock-tested, and the freeze boundary can be bypassed by other same-user tools that access the host socket.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 150008,
      "name": "corallium",
      "does": "Exposes a shared claim graph with publishing, review votes, evidence verification, task leases and offline reads.",
      "useful": 3,
      "reliable": 1,
      "polish": 3,
      "creative": 4,
      "beyond": 3,
      "total": 17,
      "best": "Claims can become contested or suspect as reviews and withdrawn ancestors change the graph, making shared knowledge revisable.",
      "worst": "The client reads read_token and write_token directly from config.yaml or os.environ rather than Hermes’s secret scope, violating the catalog credential rule.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153372,
      "name": "stepup",
      "does": "Adds expiring TOTP unlocks for selected tools on messaging platforms while consuming unlock messages before the model sees them.",
      "useful": 4,
      "reliable": 2,
      "polish": 3,
      "creative": 3,
      "beyond": 4,
      "total": 20,
      "best": "A small standard-library implementation adds replay protection, sender lockouts and scoped-secret lookup without replacing Hermes approvals.",
      "worst": "The guard explicitly allows protected tools when session identity is absent or evicted, so its security boundary fails open on missing lifecycle context.",
      "standout": false,
      "blocked": null
    }
  ]
}