Qmd

OpenClaw analysis

The skill's instructions mostly match a local search CLI, but there are small inconsistencies and moderate install/credential risks you should understand before installing.

Confidence: medium

VirusTotal

Type: OpenClaw Skill Name: qmd Version: 1.0.0 The skill bundle defines a local search/indexing CLI tool. The `SKILL.md` provides installation instructions for `qmd` from a seemingly legitimate GitHub repository (`https://github.com/tobi/qmd`) and outlines local CLI usage. There is no evidence of data exfiltration, malicious execution instructions, persistence mechanisms, prompt injection attempts, or obfuscation. All described operations are local and aligned with the stated purpose of a search/indexing tool.