treemd

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: treemd Version: 1.0.0 The treemd skill bundle provides instructions and documentation for a markdown analysis CLI tool. It facilitates structural navigation and complex queries using a custom query language (tql) to extract sections, headings, and metadata from markdown files. The instructions in SKILL.md and references/query-language.md are consistent with the stated purpose of document exploration and extraction, with no evidence of malicious intent, data exfiltration, or unauthorized execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run treemd commands on Markdown files you provide or direct it to inspect.

Why it was flagged

The skill explicitly directs the agent to run a local CLI for Markdown analysis. This is central to the stated purpose, but users should understand that local command execution and file reading are part of normal operation.

Skill content
For scripted/agent tasks, always use CLI mode. TUI mode is reserved for human interactive viewing.
Recommendation

Use it on documents you are comfortable having the agent analyze, and keep command use scoped to intended Markdown files.

What this means

Installing the external treemd binary expands the trust boundary beyond the skill text reviewed here.

Why it was flagged

The skill relies on an external CLI installed outside the reviewed instruction-only package. This is expected for this skill, but it shifts trust to the Cargo package or GitHub release.

Skill content
> **Install**: `cargo install treemd` or download binary from [releases](https://github.com/Epistates/treemd/releases)
Recommendation

Install treemd only from a trusted source, prefer pinned versions or verified releases when possible, and review the upstream project if using it in sensitive environments.