Back to skill
Skillv1.0.0

VirusTotal security

Qmd Hardened · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 1:42 AM
Hash
9f2ec19ec729014dc83f9360e71eaef3582858b7bd375f63e032be7eaf0f984f
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: qmd-hardened Version: 1.0.0 The bundle provides a local file indexing and search utility (qmd) with a strong focus on security hardening. The SKILL.md file contains explicit defensive instructions (guardrails) to prevent the AI agent from exfiltrating data via network pipes, exposing credentials in search results, or misconfiguring the OLLAMA_URL to non-localhost endpoints. The SAFETY.md file provides a comprehensive rationale and test cases for these protections, and the installation source (github.com/tobi/qmd) appears to be a legitimate public repository.
External report
View on VirusTotal