Local hybrid search for markdown notes and docs. Use when searching notes, finding related content, or retrieving documents from indexed collections.
Security Analysis
high confidenceThe skill's requirements and runtime instructions are coherent with a local markdown search tool — nothing requested or instructed appears unrelated to that purpose.
Name/description match the declared requirements: the skill requires the 'qmd' binary and its SKILL.md documents how to use qmd to index and search local Markdown collections. No unrelated credentials, binaries, or config paths are requested.
Instructions stay within the scope of indexing and searching local Markdown files, but explicitly instruct the agent to run commands that will: (1) download GGUF models on first run, (2) perform embedding work (which may invoke local LLMs and load models into memory), and (3) optionally create scheduled jobs (cron) that re-index/embeds. These behaviors imply network downloads and persistent disk writes (cache and model files) and potential high CPU/RAM usage; they are expected for this tool but worth noting.
No formal install spec in the registry, but SKILL.md includes an install command (bun install -g https://github.com/tobi/qmd). Installing via bun will fetch and run code from the qmd GitHub repo — this is reasonable for an open-source tool but does execute external code, so verify the repository/source before installing.
The skill does not request secrets or unrelated environment variables. It references PATH and XDG_CACHE_HOME (for cache location), which are appropriate and proportional to running a local binary that caches models and data.
The skill does not request always: true and doesn't modify other skills. It suggests optionally scheduling reindexes (cron) which is normal for keeping an index fresh; this is a user-controlled persistence step rather than implicit forced presence.
Guidance
This skill appears to be what it says: a local Markdown search wrapper around the qmd binary. Before installing and using it, consider: (1) the install command pulls code from the qmd GitHub repo — review/trust the repo before running bun install -g; (2) on first runs qmd may download GGUF models and write them to ~/.cache/qmd/models (or XDG_CACHE_HOME) — expect network activity and significant disk and memory use if local LLMs are loaded; (3) only index directories you intend to expose to the tool (don’t point it at system or sensitive paths); and (4) if you plan to use scheduled reindexing or keep local models warm, consider running those jobs in an isolated environment or container. If any of the above is a concern, review the upstream project and run qmd manually in a controlled environment before granting the agent permission to invoke it automatically.
Latest Release
v1.1.0
Performance-tuned qmd skill: BM25 default, vsearch slow warning, auto-reindex cron, memory_search vs qmd distinction
More by @levineam
Published by @levineam on ClawHub
