QMD - Quick Markdown Search

ReviewAudited by ClawScan on May 1, 2026.

Overview

This looks like a coherent local Markdown search skill, but users should trust the external qmd install source and only index notes they are comfortable exposing to the agent.

Before installing, make sure you trust the qmd GitHub project and Bun-based install path. Only add Markdown directories you want the agent to search, avoid indexing secrets or highly private notes, and enable cron or scheduler refreshes only if you want ongoing background indexing.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or using semantic search means trusting the upstream qmd package and its model download source.

Why it was flagged

The skill relies on installing an external GitHub-hosted package and downloading model files on first use. This is disclosed and central to the tool, but versions and model provenance are not pinned in the skill artifacts.

Skill content
`bun install -g https://github.com/tobi/qmd` ... `Uses local GGUF models; first run auto-downloads them.`
Recommendation

Install only if you trust the upstream project; prefer a reviewed or pinned release if available.

What this means

Notes, journals, docs, or other Markdown files you index may become searchable and readable by the agent during relevant tasks.

Why it was flagged

The skill builds an index of local Markdown files and can retrieve full document content. It states that files are explicitly indexed, so this is purpose-aligned, but indexed private notes may be surfaced into agent context.

Skill content
`qmd collection add /path/to/notes --name notes --mask "**/*.md"` ... `qmd get "path/to/file.md"       # Full document`
Recommendation

Only index directories you want the agent to search, use narrow masks or collections, and avoid indexing secrets or highly private notes.

What this means

If enabled, indexing can continue to process newly added Markdown files and may consume resources on a schedule.

Why it was flagged

The skill suggests optional scheduled jobs to keep the index and embeddings fresh. This is disclosed and purpose-aligned, but it is persistent background behavior if the user enables it.

Skill content
Automate indexing so results stay current ... `0 * * * * export PATH="$HOME/.bun/bin:$PATH" && qmd update` ... `0 5 * * * export PATH="$HOME/.bun/bin:$PATH" && qmd embed`
Recommendation

Enable scheduling only deliberately, scope indexed collections carefully, and keep a record of how to disable the cron or scheduler job.