Qmd

Search markdown knowledge bases, notes, and documentation using QMD. Use when users ask to search notes, find documents, or look up information.

This skill appears to do what it says (search local markdown) but you should be cautious before installing or enabling it: 1) Verify the npm package (@tobilu/qmd) and its source code/reputation before running npm install -g; prefer reviewing the package on npm/GitHub or installing in a sandbox/container. 2) Be aware qmd will read whatever directories you add as collections — only add directories you trust and avoid system or secrets-containing paths. 3) The references suggest adding qmd as an MCP server in agent configs (e.g., ~/.openclaw/openclaw.json); back up those config files before modifying them and understand that this grants the tool persistent integration with your agent. 4) If you will run qmd mcp --http (daemon), consider firewall/port controls (default 8181) and whether you want a local HTTP endpoint. 5) If you need lower risk, keep the skill instruction-only (do not modify agent config) and run qmd manually in a controlled environment. If you want this skill, validate the package and its behavior first; the metadata omission of the expected qmd binary is a small inconsistency but not necessarily malicious.

Type: OpenClaw Skill Name: qmd-2 Version: 0.1.0 The skill bundle provides a legitimate interface for searching local markdown knowledge bases using the 'qmd' utility. It defines standard MCP tools (query, get, multi_get, status) and limits the agent's execution scope to the 'qmd' command and its associated MCP server, following the principle of least privilege. No indicators of data exfiltration, malicious execution, or prompt injection were found in SKILL.md or the reference documentation.