QMD CLI

• Analyzed: May 12, 2026, 3:08 AM
• Findings: 1
• Version: 1.1.0
• Hash: c558d7f759e6a5ceac35549b9206787a51baf736f329df7366c872175ac26a51
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the agent to install a global CLI tool (`qmd`) from a remote GitHub repository (`https://github.com/tobi/qmd`) using `bun install -g` as detailed in `SKILL.md`. This constitutes a supply chain risk, as the installation process can execute arbitrary code from the remote package. Additionally, the skill can instruct the agent to run `qmd mcp`, which starts a server process, potentially exposing an attack surface. While these actions are aligned with the stated purpose of providing `qmd` functionality, they involve high-privilege operations and risky capabilities without clear malicious intent from the skill bundle itself.