QMD Search

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is a coherent local markdown-search helper, but users should understand it relies on an external qmd CLI and may create local indexes or embeddings of their selected notes.

This skill appears suitable for local markdown search. Before using it, verify the qmd tool you install, only add folders you intend to make searchable, and check how qmd stores or deletes indexes and whether hybrid LLM reranking is fully local in your setup.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing qmd gives an external CLI access to your local environment when you use it.

Why it was flagged

The skill documents a global install from a GitHub URL, but the installed qmd code is not included in the provided artifacts and the command is not pinned to a specific version.

Skill content
bun install -g https://github.com/tobi/qmd
Recommendation

Verify the qmd repository and consider pinning or reviewing the package before installing it globally.

What this means

The agent may search indexed local notes and show snippets or read a selected markdown file.

Why it was flagged

The skill expects the agent to run local qmd commands and optionally read local markdown files from search results. This is aligned with the search purpose, but it is still local file/tool access.

Skill content
Run appropriate search command ... If user wants to read a specific result, use the Read tool on the file path
Recommendation

Use this skill only with collections you are comfortable letting the agent search, and review file paths before asking it to read full files.

What this means

Private notes in the chosen collection may be indexed and reused for later searches.

Why it was flagged

The skill instructs users to add a local vault as a collection and generate embeddings, which likely creates persistent local search indexes of private markdown content.

Skill content
Pre-indexed content means fast searches ... qmd collection add ~/path/to/vault --name notes ... qmd embed --collection notes
Recommendation

Index only intended folders, understand where qmd stores indexes and embeddings, and remove indexes for collections you no longer want searchable.

What this means

If hybrid search uses a remote LLM in a particular qmd setup, snippets from private notes could leave the local machine despite the general local/privacy claim.

Why it was flagged

The artifact claims local/private behavior while also describing LLM reranking for hybrid search. The provided artifacts do not show whether that reranking is local or uses an external provider.

Skill content
Local & private - All indexing and search happens locally ... Hybrid Search ... Combines both approaches with LLM reranking
Recommendation

Verify qmd's hybrid-search and reranking configuration before using it on sensitive notes.