{
  "batch": "read1-135",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Adds turn completion and approval notifications, a Desktop status chip, and mute controls.",
      "useful": 4,
      "reliable": 4,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 21,
      "best": "Its hooks and Desktop watcher cover both CLI and gateway turns, with small state tests.",
      "worst": "The README's install path is machine-specific and requires manually copying the Desktop plugin.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant events and exposes four tools for querying and controlling devices.",
      "useful": 5,
      "reliable": 5,
      "polish": 5,
      "creative": 3,
      "beyond": 5,
      "total": 28,
      "best": "A tested gateway adapter, toolset, entity policies, and secret-backed token setup make this a complete platform integration.",
      "worst": "Setup still requires a Home Assistant instance and a privileged long-lived token.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 149936,
      "name": "time-machine",
      "does": "Captures workspace snapshots around tool calls and offers diff, diagnosis, and restoration through tools and UIs.",
      "useful": 4,
      "reliable": 2,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 24,
      "best": "The private Git store, timeline surfaces, and targeted rollback offer a substantial agent workflow upgrade.",
      "worst": "The dashboard restore API defaults user_approved to true, so its claimed human approval boundary is not enforced by that route.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152835,
      "name": "data-wrangler",
      "does": "Adds deterministic profiling, read-only SQL queries, and cleaned-copy output for local tabular files.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 2,
      "beyond": 3,
      "total": 19,
      "best": "Its tools compute full-file statistics and use a SQLite authorizer to reject query writes.",
      "worst": "Only one local integration test covers the main path; loading large files and building the in-memory SQL table have no resource budget.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153926,
      "name": "doom",
      "does": "Adds a playable Doom tab to the Hermes dashboard with verified Freedoom download or a user-provided WAD.",
      "useful": 2,
      "reliable": 3,
      "polish": 4,
      "creative": 4,
      "beyond": 3,
      "total": 19,
      "best": "The game UI and checksum-verified WAD backend are real, with safeguards against symlinked or blocking files.",
      "worst": "It does little for the agent's work, and the tests cover the backend but not the browser game engine.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153801,
      "name": "scopeledger",
      "does": "Reconciles staged service-project scope, deliveries, approvals, and invoices into evidence-linked review reports.",
      "useful": 3,
      "reliable": 5,
      "polish": 5,
      "creative": 4,
      "beyond": 3,
      "total": 23,
      "best": "Deterministic minor-unit accounting, source hashes, document verification gates, and extensive tests support cautious review.",
      "worst": "The workflow serves a narrow agency use case and requires substantial manual staging and attestation of source records.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153732,
      "name": "rails",
      "does": "Uses local decision and vision models in Hermes hooks to flag off-scope actions, enforce coding workflow checks, and annotate decisions.",
      "useful": 4,
      "reliable": 2,
      "polish": 3,
      "creative": 4,
      "beyond": 5,
      "total": 23,
      "best": "Multiple hooks and vision tools make agent decisions and screen verification observable and actionable.",
      "worst": "Its main guard depends on a separate local d1 server the plugin does not provide, while much of the default scope gate only warns and the UI text is personalized to one user.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151128,
      "name": "clearance",
      "does": "Enforces per-sender tool tiers, turn rate limits, and audit records for Hermes gateway users.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 26,
      "best": "Code-level, deny-by-default hooks use gateway sender identity, and an integration test exercises real tool dispatch.",
      "worst": "Its security depends on Hermes propagating sender identity to every execution path; detached workers are treated as local sessions.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150353,
      "name": "fluent",
      "does": "Learns installed CLI help and man pages, then checks agent shell commands for invalid options and asks approval for destructive ones.",
      "useful": 5,
      "reliable": 5,
      "polish": 5,
      "creative": 5,
      "beyond": 5,
      "total": 30,
      "best": "It combines exact-binary matching, cautious command parsing, native approval hooks, rich tests, and a finished dashboard and chat workflow.",
      "worst": "Coverage is limited to confidently parsed help on local backends, and adoption runs the selected program's help command on the host.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 152699,
      "name": "hermes-plugin-dev",
      "does": "Bundles a Hermes plugin development skill with template scaffolding and offline static lint tools.",
      "useful": 3,
      "reliable": 4,
      "polish": 5,
      "creative": 3,
      "beyond": 3,
      "total": 21,
      "best": "The lint tool checks manifests, registrations, schema cost, and common security pitfalls without importing the target plugin.",
      "worst": "Its audience is plugin authors, and much of its guidance is a skill that can age as Hermes changes.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153463,
      "name": "evm-token-inspector",
      "does": "Reads token metadata, ownership, EIP-1967 proxy state, and a V2 liquidity pair on four EVM chains.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 2,
      "beyond": 3,
      "total": 16,
      "best": "The single read-only tool validates addresses and provides a compact set of on-chain facts without signing or keys.",
      "worst": "A nonstandard token string can abort the whole inspection rather than leave optional metadata unknown; serial public-RPC fallbacks can make a check very slow.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153906,
      "name": "omnihermes",
      "does": "Attempts to gate risky Hermes tool calls with local face verification, liveness checks, and a timed unlock window.",
      "useful": 3,
      "reliable": 1,
      "polish": 3,
      "creative": 4,
      "beyond": 5,
      "total": 21,
      "best": "It has a real hook and biometric pipeline with a fail-closed branch and targeted unit tests.",
      "worst": "The supposedly read-only shell allowlist accepts command substitution, its encryption key defaults to a local file, and the claimed continuous away monitor has no camera loop.",
      "standout": false,
      "blocked": null
    }
  ]
}