Qmd

Local hybrid search for markdown notes and docs. Use when searching notes, finding related content, or retrieving documents from indexed collections.

This skill appears coherent for running a local Markdown search tool, but review a few points before installing: 1) The agent will call your local qmd binary — ensure you trust the qmd binary's source (the SKILL suggests installing via bun from a GitHub repo). 2) qmd can auto-download large GGUF models to ~/.cache/qmd/models (or XDG_CACHE_HOME); consider redirecting the cache or blocking network access if you don't want automatic model downloads. 3) Indexing is explicit (you must run qmd collection add /path/to/notes), but be careful not to index sensitive directories (password stores, system configs, private keys). 4) Installing via bun will fetch and install code from GitHub — run that install in a controlled environment or inspect the upstream repo first. If you want extra safety, run qmd in a sandboxed environment or review the upstream project (https://github.com/tobi/qmd) before granting the agent the ability to invoke it.

Type: OpenClaw Skill Name: qmd-skill-2 Version: 0.1.0 The skill bundle is classified as benign. It transparently instructs the OpenClaw agent to install the 'qmd' local markdown search tool from its official GitHub repository via `bun install -g https://github.com/tobi/qmd` in SKILL.md. All subsequent instructions guide the agent on how to configure and use the 'qmd' tool for its stated purpose of local markdown search, including examples for maintenance via cron. There is no evidence of data exfiltration, unauthorized remote execution, persistence mechanisms beyond local maintenance, or prompt injection attempts to subvert the agent's security or purpose. The network and shell access are directly tied to the legitimate installation and operation of the specified tool.