Qmd
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a legitimate local markdown search skill, but it relies on an external qmd tool and can create persistent indexes of the local notes you choose to add.
This skill is reasonable for local markdown search if you trust the external qmd tool. Before installing, review the qmd source or package provenance, index only intended markdown folders, avoid directories containing secrets, and enable scheduled updates only if you want persistent background re-indexing.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill’s dependency may add third-party code and downloaded model files to the local environment.
The skill depends on an external package installed from GitHub and model artifacts downloaded at runtime; those external components are not included in the provided files for review.
`bun install -g https://github.com/tobi/qmd` ... `Uses local GGUF models; first run auto-downloads them.`
Install only if you trust the qmd project/source, and consider pinning or reviewing the external package and model sources before use.
The agent may later search and retrieve information from any local notes or documents you added to qmd collections, including private content if you indexed it.
The skill builds a reusable search index over local markdown documents and can retrieve document contents from those indexed collections.
`qmd collection add /path/to/notes --name notes --mask "**/*.md"` ... `qmd` searches *your local files* (notes/docs) that you explicitly index into collections.
Index only directories you intend the agent to search, avoid collections containing secrets or highly sensitive notes, and use collection filters for narrower searches.
If you add the cron/scheduler examples, qmd may keep updating indexes in the background on a recurring schedule.
The skill suggests optional scheduled indexing jobs that can continue running after setup; this is disclosed as maintenance guidance rather than hidden autonomous behavior.
Automate indexing so results stay current ... `0 * * * * export PATH="$HOME/.bun/bin:$PATH" && qmd update`
Only enable scheduled updates if you want ongoing indexing, and remove the cron/scheduler entry if you no longer use the skill.