Qmd Skill Main
v1.0.0Local hybrid search for markdown notes and docs. Use when searching notes, finding related content, or retrieving documents from indexed collections.
⭐ 1· 1.8k·8 current·8 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (local hybrid search of markdown notes) matches what the SKILL.md instructs (qmd search/vsearch/query against indexed local collections). Required binaries list only 'qmd', which is appropriate, but the docs also call out prerequisites (Bun >=1.0.0, sqlite on macOS) and an install method that uses Bun to pull the project — those prerequisites are mentioned in the instructions but not declared in the registry 'required binaries' list, a minor inconsistency to be aware of.
Instruction Scope
SKILL.md only instructs use of the qmd CLI to index and search user-specified local Markdown paths, manage indexes, and schedule updates. It does not direct the agent to read unrelated system files, exfiltrate data, or access unrelated credentials. It does mention automatic model downloads and a default cache path (~/.cache/qmd/models/) which are expected for local embedding workflows.
Install Mechanism
The registry lists no formal install spec, but SKILL.md and embedded metadata recommend 'bun install -g https://github.com/tobi/qmd'. Installing from a GitHub repo via Bun is common but executes unreviewed code during installation — a moderate-risk install pattern compared with a vetted package/release. Also the tool may auto-download GGUF models from the network on first run (large files, remote sources).
Credentials
The skill declares no required environment variables or credentials, and SKILL.md only references expected env items like PATH and XDG_CACHE_HOME for cache override. No sensitive credentials are requested, and the scope of environment access (local files for indexing, cache for models) is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request always: true or other elevated persistent privileges in the registry. It is an instruction-only skill that relies on the qmd binary; it does not attempt to force permanent inclusion or autonomous invocation beyond normal agent behavior.
Assessment
This skill appears to do what it says: index and search local Markdown using the qmd CLI. Before installing, verify you trust the qmd GitHub source (the SKILL suggests installing via Bun from the repo), and prefer installing through your package manager or official releases if available. Be aware qmd may download local GGUF models automatically (large disk and network usage) and will read any files you add to its collections — only index directories you intend to expose to the tool. Finally, install Bun/SQLite if you plan to follow the SKILL.md instructions, and confirm the qmd binary on PATH is the expected one.Like a lobster shell, security has layers — review code before you run it.
latestvk97czrzctcd9hgc87ypt7ndxnn80gyj1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
OSmacOS · Linux
Binsqmd