{
  "batch": "read1-019",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Notifies the user when a Hermes turn ends or needs approval, with status controls in chat and Desktop.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 2,
      "beyond": 4,
      "best": "It uses session and approval hooks plus a Desktop surface to make unattended agent work visible.",
      "worst": "It is a fairly conventional completion notifier and its Desktop setup still includes a manual copy step.",
      "standout": false,
      "blocked": null,
      "total": 21
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant for filtered event delivery, notifications, device queries, and service calls.",
      "useful": 5,
      "reliable": 5,
      "polish": 5,
      "creative": 3,
      "beyond": 5,
      "best": "It is a complete, tested smart-home platform integration with explicit service and entity safety controls.",
      "worst": "It is an established integration rather than a novel agent capability.",
      "standout": false,
      "blocked": null,
      "total": 28
    },
    {
      "pr": 150858,
      "name": "secret-guard",
      "does": "Accepts keys through a macOS keychain dialog and blocks or redacts common paths by which secrets could reach the model.",
      "useful": 4,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "best": "It combines key intake, a secret source, pre-execution gates, inbound blocking, and fail-closed output transforms with extensive tests.",
      "worst": "It is macOS-only and depends in part on non-public Hermes redaction internals, with documented bypass limits.",
      "standout": true,
      "blocked": null,
      "total": 27
    },
    {
      "pr": 153936,
      "name": "live-video",
      "does": "Provides a Hermes tool for starting and inspecting a separately deployed phone-camera live-video relay and its vision watch logs.",
      "useful": 3,
      "reliable": 2,
      "polish": 4,
      "creative": 4,
      "beyond": 4,
      "best": "The relay control and verifier-log presentation are unusually well documented and expose a genuine live-camera capability.",
      "worst": "The plugin depends on a separately provisioned Node/Python relay and Gemini service, while its tests mostly cover control and parsing paths.",
      "standout": false,
      "blocked": null,
      "total": 21
    },
    {
      "pr": 152618,
      "name": "life-manager",
      "does": "Stores stated commitments and habit streaks, injects a current board into turns, and offers tools and a scheduled check-in.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "best": "Its focused state model, lifecycle wiring, and tests make persistent commitments actionable across sessions.",
      "worst": "Commitment detection is deliberately simple phrase matching, so it will miss or misclassify natural-language commitments.",
      "standout": false,
      "blocked": null,
      "total": 23
    },
    {
      "pr": 152944,
      "name": "account-switcher",
      "does": "Lists and reprioritizes existing provider credential-pool accounts through Hermes authentication CLI commands.",
      "useful": 3,
      "reliable": 2,
      "polish": 3,
      "creative": 2,
      "beyond": 3,
      "best": "It has a useful dry-run and post-switch verification path and avoids reading credential values.",
      "worst": "There are no tests, and the custom process runner neither reports exit status nor terminates a timed-out child.",
      "standout": false,
      "blocked": null,
      "total": 16
    },
    {
      "pr": 150972,
      "name": "wever-labs",
      "does": "Registers two remote Wever Labs MCP endpoints, one paid and one free, for runtime tool discovery.",
      "useful": 2,
      "reliable": 1,
      "polish": 2,
      "creative": 1,
      "beyond": 3,
      "best": "The small manifest marks both remote MCP connections untrusted.",
      "worst": "The submission is only declarative connector metadata, leaving the claimed hosted tools, payment path, and reliability outside reviewable code.",
      "standout": false,
      "blocked": null,
      "total": 12
    },
    {
      "pr": 149671,
      "name": "pdf-shrink",
      "does": "Inspects and locally recompresses PDFs to a requested size while preserving the original and verifying the output.",
      "useful": 4,
      "reliable": 5,
      "polish": 5,
      "creative": 3,
      "beyond": 3,
      "best": "It has a careful quality ladder, write confinement and source-integrity checks, previews, and a broad synthetic test suite.",
      "worst": "It is a strong implementation of a familiar document utility rather than a change to Hermes itself.",
      "standout": false,
      "blocked": null,
      "total": 23
    },
    {
      "pr": 153197,
      "name": "secret-remediation",
      "does": "Detects credential-shaped text in Hermes flows, redacts later exposure, records fingerprints, and can purge selected local traces.",
      "useful": 4,
      "reliable": 1,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "best": "It is unusually thorough about detecting leaks across hooks, transcripts, SQLite stores, histories, and explicit limitations.",
      "worst": "A detected or blocked string automatically triggers destructive rewrites of chat and shell history by default, so a false positive can alter data without a separate approval.",
      "standout": false,
      "blocked": null,
      "total": 23
    },
    {
      "pr": 153380,
      "name": "snare",
      "does": "Plants per-install decoy credentials in local command environments and blocks their attempted exfiltration while producing an attack-chain report.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 5,
      "beyond": 5,
      "best": "Its canary-based tripwire, attack provenance ledger, lockdown, integration test, and human-facing incident reports address prompt injection as a runtime problem.",
      "worst": "The environment trap is inactive on remote backends and error handling in the pre-tool hook intentionally fails open.",
      "standout": true,
      "blocked": null,
      "total": 27
    },
    {
      "pr": 150846,
      "name": "mood",
      "does": "Maintains a keyword-driven mood and rapport state and appends a short tone cue to each user turn.",
      "useful": 2,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 2,
      "best": "It is compact, local-only, and persists state without model calls or prompt-cache changes.",
      "worst": "Its keyword rules are a shallow personality prompt and the delivered test is an assertion script rather than a comprehensive suite.",
      "standout": false,
      "blocked": null,
      "total": 14
    },
    {
      "pr": 152960,
      "name": "pwn-board",
      "does": "Adds an evidence-backed search board and operator review workflow for investigations, including goal tests and independent verifier subagents.",
      "useful": 4,
      "reliable": 5,
      "polish": 5,
      "creative": 5,
      "beyond": 5,
      "best": "It materially improves long-running agent work with a tested evidence ledger, immutable goal-test verdicts, review gates, Desktop UI, and independent verification.",
      "worst": "The rich workflow and retained tool-output database add substantial complexity and are most valuable for investigations rather than routine chats.",
      "standout": true,
      "blocked": null,
      "total": 29
    }
  ]
}