qmd
Enables local search across personal knowledge bases and documents using a hybrid retrieval engine with advanced ranking capabilities.
Install this skill
or
79/100
Security score
The qmd skill was audited on May 17, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 44
Curl to non-GitHub URL
SourceSKILL.md
| 44 | curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - |
medium line 229
Access to hidden dotfiles in home directory
SourceSKILL.md
| 229 | Add to `~/.hermes/config.yaml`: |
low line 307
Access to hidden dotfiles in home directory
SourceSKILL.md
| 307 | mkdir -p ~/.config/systemd/user |
low line 309
Access to hidden dotfiles in home directory
SourceSKILL.md
| 309 | cat > ~/.config/systemd/user/qmd-daemon.service << 'EOF' |
medium line 434
Access to hidden dotfiles in home directory
SourceSKILL.md
| 434 | - **Index & vectors:** `~/.cache/qmd/index.sqlite` |
low line 44
External URL reference
SourceSKILL.md
| 44 | curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - |
low line 254
External URL reference
SourceSKILL.md
| 254 | # Runs on http://localhost:8181 by default |
low line 262
External URL reference
SourceSKILL.md
| 262 | url: "http://localhost:8181/mcp" |
low line 277
External URL reference
SourceSKILL.md
| 277 | "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
Scanned on May 17, 2026
View Security DashboardGitHub Stars 153.5K
Rate this skill
Categorydata analytics
UpdatedMay 20, 2026
NousResearch/hermes-agent