EXTENSIONS

Checks UniFi/Ubiquiti CVEs against NVD and GitHub Advisory DB. Outputs alert text only for newly discovered HIGH/CRITICAL CVEs. State persisted locally across runs for idempotency.

Manage Hermes agent environment variables via SSH or locally from inside the container. Supports setEnv, removeEnv, listKeys, restartGateway, and rotateSwampKey (updates all four key locations + full container recreation).

Import local 3D model files into a Manyfold-accessible library directory with reusable copy, move, hardlink, symlink, and dry-run planning modes.

Track files in GitHub repositories and materialize them on the local filesystem, deduplicated on the upstream Git blob SHA. One sync call fans out across any number of {repo, ref, srcPath, destPath} targets via the gh CLI, rewriting each destination only when the upstream content changed or the local file is missing. A composable primitive for keeping a local copy of a shared skill, snapshot, or config fresh.

Apply pyannote/speaker-diarization-3.1 to a Whisper transcript JSON and tag each segment with a speaker label. Requires Python + pyannote.audio and a Hugging Face token (gated model). Falls back gracefully — a failed diarization never blocks the pipeline; the original transcript is returned unchanged.

Transcribe audio files using mlx_whisper on Apple Silicon. Runs the mlx_whisper CLI, captures the JSON output, and stores the full transcript (segments + language) as a swamp resource for downstream pipeline steps. Requires mlx_whisper installed (pip install mlx-whisper).

Chunk a Whisper transcript and summarize it into a Granola-style meeting note via a local Ollama LLM. Handles long recordings with greedy segment-boundary chunking and an LLM merge pass. Pure TypeScript — no Python, no subprocess. Also provides combine_notes (merge handwritten + analysis) and write_note (write markdown to disk) for full pipeline workflows.

Manage Hermes AI agent model configuration — set the main model, configure auxiliary task overrides, and restart the gateway. Safe edit protocol: backup → edit → validate → restart.

Send push notifications via ntfy.sh (self-hosted or public). A single focused model with one method: send a notification with title, message, priority, and optional emoji tags. Works with the free ntfy.sh service or any self-hosted ntfy instance.

Hermes review automation kit with a local-first collector model, workflow-scope report, and nightly workflow for reviews and publishability screening.

Swamp model for building, validating, and managing Hermes cron job specifications. Encodes verified syntax rules, provides build/validate methods for creating repeatable scheduled workflows.

Linear project management integration for swamp — issue CRUD, viewer auto-assignment, label management by name, and team/project/state listing via the official @linear/sdk.

Deploy a static site directory to AWS S3 with MD5-based change detection and stale object cleanup

Scan for running CLI coding agent processes (claude, opencode, amp, gemini), classify each as healthy, orphaned, zombie, or long-running, and produce structured snapshots. Works on macOS and Linux.

Dispatch agent-browser commands as a single subprocess via `agent-browser batch --json` so cookies and Chromium state persist across every step. Supports {{secret:NAME}} placeholders for credentials.

Post Block Kit messages to Slack from swamp models and workflows, with optional file attachments uploaded via the modern external-upload flow. Three methods: send (text + blocks + optional thread reply), sendWithFiles (uploads local files first, then posts a message referencing them), and verifyAuth (auth.test smoke check after token setup).

Gather a Linear user's daily activity — issues completed, moved to review, created, comments authored, and in-flight assignments. Read-only, scoped to configurable team keys. Designed as a data source for EOD reports and standup summaries.

Poll open GitHub PRs for new reviews, comments, and check failures with per-PR watermark deduplication and GitHub API rate-limit backoff. One refresh call fetches all activity; downstream models consume the cached feedbackEvent artifacts without making additional API calls.

Reconcile GitHub/Graphite PR stacks with Linear issue states — scan PRs for ticket references, compare states, and transition Linear issues to match.

Invoke CLI coding agents (claude, opencode, amp, gemini) with typed inputs and capture structured outputs — tokens, cost, duration, retries, and exit code. Supports slash command resolution and JSON response parsing.

Find and remove orphaned Docker Compose containers whose git worktree directory no longer exists. Cross-references live compose projects against git worktree paths. Works with any repo that uses worktrees + compose.

Diagnose and prune git worktrees. Parses `git worktree list --porcelain`, validates paths exist on disk, detects stale/locked/prunable entries, and optionally prunes them. Works with any git repository — no project-specific assumptions.

Manage a Ubiquiti UniFi Dream Machine (UDM / UDM Pro / UDM SE) via the legacy Network firewall API: firewall groups, firewall rules, clients, and networks. Complements @stack72/ubiquity (which focuses on traffic collection) by enabling configuration-as-data workflows: sync existing groups/rules into the swamp data model, reconcile group membership, create or delete firewall rules, and toggle rule state.