@steipete

Qmd

Local search/indexing CLI (BM25 + vectors + rerank) with MCP mode.

Current version
v1.0.0
97 2.8万All installs 379

v1.0.0

2026/01/04

Version

No changelog provided.

Security Scan

Status

suspicious

Open VirusTotal

OpenClaw

gpt-5-mini

suspicious

OpenClaw analysis

The skill's instructions mostly match a local search CLI, but there are small inconsistencies and moderate install/credential risks you should understand before installing.

Confidence: medium

VirusTotal

Type: OpenClaw Skill Name: qmd Version: 1.0.0 The skill bundle defines a local search/indexing CLI tool. The `SKILL.md` provides installation instructions for `qmd` from a seemingly legitimate GitHub repository (`https://github.com/tobi/qmd`) and outlines local CLI usage. There is no evidence of data exfiltration, malicious execution instructions, persistence mechanisms, prompt injection attempts, or obfuscation. All described operations are local and aligned with the stated purpose of a search/indexing tool.

Metadata

  • Owner: @steipete
  • Created: 2026/01/04
  • Updated: 2026/02/26
  • Versions: 1
  • Comments: 5
  • Scan checked at: 2026/02/11

Runtime

No runtime requirements are exposed in the official public payload.