{
 "batch": "read1-057",
 "plugins": [
  {
   "pr": 0,
   "name": "done-bell",
   "does": "Hooks session end and approval events to ring an OS notification/chime and show a busy/done/needs-you chip in Hermes Desktop.",
   "useful": 3,
   "reliable": 3,
   "polish": 2,
   "creative": 3,
   "beyond": 4,
   "total": 19,
   "best": "Uses Hermes lifecycle and approval hooks plus a Desktop pane, needing no secrets.",
   "worst": "README install steps hardcode the author's own Windows path and the 9 tests skip the notification and Desktop parts.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 0,
   "name": "homeassistant",
   "does": "Official gateway platform forwarding Home Assistant state changes plus four REST tools to read and call HA services.",
   "useful": 5,
   "reliable": 5,
   "polish": 4,
   "creative": 2,
   "beyond": 5,
   "total": 26,
   "best": "Real security model: blocked code-running domains, entity allow/deny lists, six test files and reconnect handling.",
   "worst": "ha_call_service can operate physical devices like locks without per-call human approval unless the operator sets a denylist.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 149148,
   "name": "undo-effects",
   "does": "Tool-execution middleware snapshots files before write_file, patch and destructive shell commands so /undo-effects can restore them.",
   "useful": 5,
   "reliable": 4,
   "polish": 4,
   "creative": 5,
   "beyond": 5,
   "total": 28,
   "best": "Snapshots inside Hermes's tool path with conflict-safe restores and honest 'not covered' reporting, backed by unit and e2e tests.",
   "worst": "Coverage of terminal commands rests on a hand-written shell parser and snapshots are stored unencrypted.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 150807,
   "name": "manyhands",
   "does": "Makes one Hermes bot safely multi-user: per-sender roles, tool allowlists, private memory, owner-DM approvals and per-person audit.",
   "useful": 4,
   "reliable": 4,
   "polish": 4,
   "creative": 5,
   "beyond": 5,
   "total": 27,
   "best": "Fails closed on unknown senders, only the owner can approve or edit the roster, and the operator's memory is hidden from others.",
   "worst": "Tests are ad-hoc scripts with no CI, and owner DMs only fully work on Telegram.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 152420,
   "name": "second-key",
   "does": "Two-person rule for dangerous commands: approvals go by Telegram to a roster, requester cannot self-approve, hash-chained ledger.",
   "useful": 4,
   "reliable": 4,
   "polish": 3,
   "creative": 4,
   "beyond": 5,
   "total": 25,
   "best": "Fail-closed approval transport that also detects tampering with approval settings and blocks /yolo.",
   "worst": "Telegram-only, no screenshots or UI, and self-protection relies on command pattern matching.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 153294,
   "name": "ci-red-to-green",
   "does": "Watches GitHub Actions and, on a red run, proposes a fix PR only after Hermes's own test runs prove red-then-green.",
   "useful": 5,
   "reliable": 4,
   "polish": 5,
   "creative": 4,
   "beyond": 4,
   "total": 26,
   "best": "Proof built from real repeated test runs, git push blocked, approval on first repo-code run, with Desktop pane, demo and CI.",
   "worst": "Only pytest and go test are supported, and the automation prompt says to use 'whatever GitHub access you have', outside its token scope.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 153693,
   "name": "offgrid",
   "does": "Platform adapter letting people with a basic phone and no data chat with Hermes over SMS/USSD via Africa's Talking.",
   "useful": 4,
   "reliable": 4,
   "polish": 4,
   "creative": 5,
   "beyond": 5,
   "total": 27,
   "best": "Scoped secret store, constant-time token check, phone allowlist and a command allowlist that refuses /yolo over SMS.",
   "worst": "Only tested in the provider sandbox, and the question queue is in memory, so a restart can lose messages.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 149613,
   "name": "doop",
   "does": "Config-only MCP pointer (mcp.json, plugin.json, one skill) to a doop design-canvas server on localhost.",
   "useful": 2,
   "reliable": 2,
   "polish": 2,
   "creative": 3,
   "beyond": 3,
   "total": 15,
   "best": "Marks the MCP server untrusted so writes need approval.",
   "worst": "No code or tests, and the docs contradict the config (DOOP_MCP_URL is never read; it says Node is needed, but nothing uses it).",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 153555,
   "name": "model-doctor",
   "does": "Hooks API request results and errors to track per-model health, classify failures and report it via two tools.",
   "useful": 3,
   "reliable": 3,
   "polish": 3,
   "creative": 3,
   "beyond": 4,
   "total": 20,
   "best": "Observes Hermes's own API traffic with no network or credentials, saved atomically.",
   "worst": "Claims more than the code: it is passive, not proactive; the rolling window is never used; and the refresh tool duplicates the status tool.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 150340,
   "name": "hotwire",
   "does": "Lets Hermes design analog circuits from English, verifying netlists with its own ngspice-checked simulator and exporting BOM, stripboard and KiCad.",
   "useful": 3,
   "reliable": 4,
   "polish": 5,
   "creative": 5,
   "beyond": 4,
   "total": 25,
   "best": "A real simulator validated against ngspice with ~137 tests, plus a Desktop pane and many screenshots.",
   "worst": "Its pre_llm_call hook injects a self-promoting hint on loose keyword matches, and the use case is niche.",
   "standout": false,
   "blocked": null
  },
  {
   "pr": 152869,
   "name": "screen-overlay",
   "does": "On Windows, draws click-through pointers, spotlights, step guides and sticky notes on the real desktop, using UI Automation targets.",
   "useful": 4,
   "reliable": 3,
   "polish": 5,
   "creative": 5,
   "beyond": 5,
   "total": 27,
   "best": "Gives Hermes a new ability on the user's own machine, with careful safety: no focus steal, expiry, a kill hotkey and an authenticated pipe.",
   "worst": "Windows-only, the daemon has no automated tests, and the README screenshots are composites.",
   "standout": true,
   "blocked": null
  },
  {
   "pr": 151166,
   "name": "weir",
   "does": "Config-only package pointing Hermes at Weir's paid hosted MCP server for public X and Reddit data.",
   "useful": 3,
   "reliable": 2,
   "polish": 3,
   "creative": 2,
   "beyond": 3,
   "total": 16,
   "best": "OAuth with PKCE and an untrusted MCP marking, so no stored secret and writes need approval.",
   "worst": "No code or tests, and its 550-line skill tells the agent to reach for Weir proactively and to re-download the skill from a remote URL.",
   "standout": false,
   "blocked": null
  }
 ]
}