← 返回 Skills 市场
dpaluy

QMD CLI

作者 dpaluy · GitHub ↗ · v1.1.0
cross-platform ✓ 安全检测通过
4838
总下载
4
收藏
18
当前安装
1
版本数
在 OpenClaw 中安装
/install qmd-cli
功能描述
Search and retrieve markdown documents from local knowledge bases using qmd. Supports BM25 keyword search, vector semantic search, and hybrid search with LLM re-ranking. Use for querying indexed notes, documentation, meeting transcripts, and any markdown-based knowledge. Requires qmd CLI installed (bun install -g https://github.com/tobi/qmd).
安全使用建议
Install only if you trust the qmd project, prefer a pinned release or reviewed package when possible, and index only folders you are comfortable making searchable by your agent. Use the MCP server only with trusted clients and avoid full-document or all-match retrieval on highly sensitive notes unless you intend that content to enter the conversation.
功能分析
Type: OpenClaw Skill Name: qmd-cli Version: 1.1.0 The skill instructs the agent to install a global CLI tool (`qmd`) from a remote GitHub repository (`https://github.com/tobi/qmd`) using `bun install -g` as detailed in `SKILL.md`. This constitutes a supply chain risk, as the installation process can execute arbitrary code from the remote package. Additionally, the skill can instruct the agent to run `qmd mcp`, which starts a server process, potentially exposing an attack surface. While these actions are aligned with the stated purpose of providing `qmd` functionality, they involve high-privilege operations and risky capabilities without clear malicious intent from the skill bundle itself.
能力评估
Purpose & Capability
The commands match the stated purpose: indexing, searching, and retrieving local markdown knowledge bases. The capability can expose private notes, docs, and transcripts to the agent, so collection scope matters.
Instruction Scope
The instructions are mostly examples and user-directed commands. Broad options like full-document retrieval, all matches, and query reranking are disclosed enough for a search skill, though users should avoid broad searches over sensitive collections.
Install Mechanism
The skill is instruction-only, but it tells users to globally install an external CLI from GitHub with bun. That is disclosed and central to the skill, but it is unpinned and should be treated as a normal third-party package trust decision.
Credentials
Indexing ~/notes and generating embeddings is proportionate for local markdown search. Upstream qmd documentation describes the LLM reranking as running locally via node-llama-cpp with GGUF models, which downgrades the scanner concern about undisclosed remote LLM exposure. ([github.com](https://github.com/tobi/qmd?utm_source=openai))
Persistence & Privilege
The index and embeddings are persistent local search state, and the optional MCP server exposes retrieval tools if the user starts it. The artifact does not show hidden startup persistence, credential use, privilege escalation, or automatic background execution.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install qmd-cli
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /qmd-cli 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
Add better support for updates
元数据
Slug qmd-cli
版本 1.1.0
许可证
累计安装 182
当前安装数 18
历史版本数 1
常见问题

QMD CLI 是什么?

Search and retrieve markdown documents from local knowledge bases using qmd. Supports BM25 keyword search, vector semantic search, and hybrid search with LLM re-ranking. Use for querying indexed notes, documentation, meeting transcripts, and any markdown-based knowledge. Requires qmd CLI installed (bun install -g https://github.com/tobi/qmd). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 4838 次。

如何安装 QMD CLI?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install qmd-cli」即可一键安装,无需额外配置。

QMD CLI 是免费的吗?

是的,QMD CLI 完全免费(开源免费),可自由下载、安装和使用。

QMD CLI 支持哪些平台?

QMD CLI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 QMD CLI?

由 dpaluy(@dpaluy)开发并维护,当前版本 v1.1.0。

💬 留言讨论