Qmd
ReviewAudited by ClawScan on May 1, 2026.
Overview
Qmd is a coherent local Markdown search skill, with disclosed but important considerations around indexing private notes, optional scheduled updates, and upstream CLI/model installation.
Before installing, make sure you trust the qmd upstream package, index only folders you intentionally want searchable, avoid sensitive files, and only enable cron or scheduler updates if you want ongoing indexing.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill’s dependency means trusting the upstream qmd package and any downloaded model files.
The skill directs installation of a global CLI from GitHub and discloses automatic model downloads; this is expected for the tool but the artifacts do not show pinning or verification details.
`bun install -g https://github.com/tobi/qmd` ... `Uses local GGUF models; first run auto-downloads them.`
Install only if you trust the qmd project/source, prefer pinned or verified releases when available, and understand where downloaded models are cached.
Files in indexed folders may become searchable and retrievable by the agent, including full document text.
The skill indexes local Markdown collections, creates embeddings, and can retrieve full documents into the agent context; this is core to the stated purpose but can include private note contents.
`qmd collection add /path/to/notes --name notes --mask "**/*.md"` ... `qmd embed` ... `qmd get "path/to/file.md" # Full document`
Index only intended folders, avoid collections containing secrets or sensitive journals, use collection filters, and treat retrieved Markdown as user data rather than authoritative instructions.
If scheduled, qmd may keep processing new or changed Markdown files and may consume local resources even outside an active search task.
The skill provides optional cron or scheduler examples that continue updating indexes after initial setup; this persistence is disclosed and purpose-aligned.
`Automate indexing so results stay current as you add/edit notes.` ... `0 * * * * ... qmd update` ... `0 5 * * * ... qmd embed`
Enable scheduled updates only with explicit user approval, keep collections narrowly scoped, and remove the cron or scheduler entry if continuous indexing is no longer wanted.