← 返回 Skills 市场
34
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install qmd-hardened
功能描述
Local search/indexing CLI (BM25 + vectors + rerank) with MCP mode.
安全使用建议
This skill appears to be a straightforward helper for the qmd CLI and is coherent with what it asks for. Two practical precautions before installing or using it: (1) Review the GitHub repo/package (https://github.com/tobi/qmd) so you know what code will be installed — npm/GitHub installs can execute arbitrary code. (2) Never set OLLAMA_URL to a remote/non-localhost endpoint unless you intentionally want your indexed content sent to that service; the SKILL.md warns that embeddings are transmitted to OLLAMA_URL and recommends keeping it local. Also follow the guardrails in SAFETY.md: confirm before deleting ~/.cache/qmd, never pipe qmd output to network commands, and redact any secrets found in search results.
功能分析
Type: OpenClaw Skill
Name: qmd-hardened
Version: 1.0.0
The bundle provides a local file indexing and search utility (qmd) with a strong focus on security hardening. The SKILL.md file contains explicit defensive instructions (guardrails) to prevent the AI agent from exfiltrating data via network pipes, exposing credentials in search results, or misconfiguring the OLLAMA_URL to non-localhost endpoints. The SAFETY.md file provides a comprehensive rationale and test cases for these protections, and the installation source (github.com/tobi/qmd) appears to be a legitimate public repository.
能力评估
Purpose & Capability
Name/description match the requirements and instructions: the skill requires the 'qmd' binary and provides commands for indexing/searching local files. The declared install (a node package from a GitHub repo that creates the 'qmd' binary) is coherent with the stated purpose.
Instruction Scope
SKILL.md only instructs use of qmd CLI commands and documents expected behaviour (index location, Ollama usage, MCP mode). It also includes explicit safety guardrails (confirm before destructive ops, avoid piping output to network, redact secrets). There are no instructions to read or transmit unrelated system data.
Install Mechanism
The install spec pulls a Node package from a GitHub repository (https://github.com/tobi/qmd) and installs the 'qmd' binary. Installing code from a third‑party GitHub repo/npm can be reasonable for a CLI but carries standard supply-chain risk — review the repo/source before installing.
Credentials
The skill does not require environment variables or credentials. It documents OLLAMA_URL (default localhost) for embeddings; this is expected, and the SKILL.md explicitly warns not to set it to a non-localhost endpoint because embeddings transmit indexed content.
Persistence & Privilege
The skill is not always-enabled, does not request to modify other skills or system-wide settings, and has no declared config path requirements. It does not demand elevated or persistent privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qmd-hardened - 安装完成后，直接呼叫该 Skill 的名称或使用
/qmd-hardened触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of qmd-hardened.
- Provides a local search and indexing CLI for documents with BM25, vector, and hybrid search modes.
- Features MCP mode for specialized operations.
- Utilizes Ollama for embedding and rerank operations (local endpoint required).
- Storage, index management, and search commands documented.
- Enhanced with security guardrails: prevents leaking data, unsafe output handling, destructive actions without confirmation, and redacts sensitive content from search results.
元数据
常见问题
Qmd Hardened 是什么？
Local search/indexing CLI (BM25 + vectors + rerank) with MCP mode. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 34 次。
如何安装 Qmd Hardened？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qmd-hardened」即可一键安装，无需额外配置。
Qmd Hardened 是免费的吗？
是的，Qmd Hardened 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Qmd Hardened 支持哪些平台？
Qmd Hardened 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Qmd Hardened？
由 Faberlens（@snazar-faberlens）开发并维护，当前版本 v1.0.0。
推荐 Skills