Pinned to hermes-official-plugins 77b179d9a4a (PR #181 merge): the sound effects tool, the
bundled sound-design skill (ffmpeg post-processing incl. mono and game variation packs) and the
Desktop sound card + library tab.
Rebuilt on main from #141775 (526b03a2e16, 1ab980b3162, 80c8baf2404): the optional-mcps/rentahuman entry those commits added and then removed already landed on main in cb6bcb401e, so only the final catalog YAML is carried.
1.0 passed base/target straight to git, so a value like --output=<path> made git write files, and reversed the PR-review diff. 1.1.0 (ba7bb0e1) rejects option-shaped refs, resolves them to commit SHAs with --end-of-options, fixes the merge-base direction and scans untracked files. Maintainer re-pin: the author is at the open-PR cap.
A security re-review of the listed pin (248af31d) found every credential read read-only and every token sent only to its own vendor, but the disclosure omitted the .anthropic_oauth.json read, Windows Credential Manager, Cursor's state.vscdb, the Grok CLI headers, the host/path override env vars and the result cache.
The entry named 0.22.25 from an older revision. The release commit a4eb71d carries 0.22.32 and the linear wikilink scanner: a crafted memory fact of 64002 bracket characters dropped from about 6.5 seconds to microseconds, with identical output on 24 edge cases and 200000 random strings. Version and sha move together; the description is unchanged.
Addresses the five blocking items from the review of 52b1ce15 (hook declared,
attachment paths in the send approval, Drive upload gated, cron scheduling
switch respected, per-profile sessions and a config_schema allowlist), plus
both recommendations. Version label follows the code at 0.28.0.
Mentions quoted inside inline code or fenced blocks no longer address the
agent (smilinTux/hermes-nextcloud-talk#6). User-mode only; the allowlist,
room-rules gating, secrets handling and platform id are unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Pins to smilinTux/hermes-nextcloud-talk@de7a900 (v1.2.0), which adds
inbound webhook hardening to bot mode: an explicit body-size cap and a
nonce-replay cache ahead of payload parsing, ported in concept (credited,
not copied) from Cliff3c/hermes-nextcloud-talk (MIT). Updates the feature
summary accordingly.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Pins the catalog entry to the plugin repo's v1.1.1 release (smilinTux/hermes-nextcloud-talk@4dfe250), which adds to the real-user connector: an agent-to-agent loop guard and active-listening context for rooms with more than one agent, room rules sourced from the Talk conversation description, and a configurable long-poll timeout. Updates the feature summary and sets readme: true so the docs site renders the pinned README.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Adds a catalog entry for a standalone Nextcloud Talk platform plugin
(chefboyrdave21/hermes-nextcloud-talk), pinned at the reviewed commit.
The plugin provides two modes behind one Hermes platform: a webhook bot
(Nextcloud Talk Bot API, HMAC-signed) and a real Nextcloud user account
(app password, long-polling the Chat REST API, with federation-invite
support). Mode is picked automatically by which credential is set.
Validated with `hermes plugins validate --install-deps` (passes clean,
no warnings) and `scripts/validate_plugin_catalog.py` against the full
catalog directory (646 entries, no collisions).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Bumps the catalog entry from 1.6.3 to 1.7.1. The plugin gains a third view (a dependency graph with
editable links and a click that lights a task's lineage), four quick scopes with a lineage modifier
shared by every view, and fixes a crash on selecting a card in the graph. Screenshots and the card
are pinned to the new sha, and the list capture gives way to the graph, which is what a reader is
deciding on.
Agent Plugins v1 package (plugin.json + mcp.json + skills/): the hosted
Astro Agents MCP server (Streamable HTTP, no auth) and the astrology skill.
Pinned at 84285c6; requires_hermes >=0.22.5, the release it was tested on.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Teknium