primr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited primr (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Company name + website → evidence-grounded, long-form strategic reports. Built for agent hosts and the CLI: structured research, strategic insight, confidence labels, and durable Word and Markdown artifacts, not a free-form chat essay.
Primr gathers public site pages, DNS/recon, hiring signals, and other open sources, develops a strategic view of the company, then produces a consultant-style Strategic Overview and selected YAML-defined strategy documents with citations and Confirmed / Reported / Estimated / Hypothesis labels. Point an agent at the repo, or run the CLI. Both paths use the same evidence, uncertainty, and long-form artifact contract, but their execution, model ownership, and assurance are different.
<p align="center"> <img src="docs/images/primr-demo.png" alt="Illustrative primr CLI session for ExampleCo: estimate, then report artifacts" width="920" loading="lazy" /> </p>
<p align="center"><sub>Placeholder demo data (ExampleCo), not a live company capture.</sub></p>
primr "ExampleCo" https://example.coIn an agent chat, that request defaults to Primr Zero: keyless evidence collection in Primr, research and writing in the host (when the host plan does not bill API usage). When a human runs the command directly in a terminal, it retains the provider-backed CLI path after a dry-run estimate and approval.
Use Primr when you need a serious first draft for discovery, account planning, diligence, competitive analysis, or strategy work, not a two-paragraph pre-call blurb (use normal web search for that).
Primr is not a generic crawler, a SaaS collaboration app, a model-serving platform, or a tool for bypassing authentication, paywalls, or site restrictions.
| Where you run it | Default path | Spend | Result |
|---|---|---|---|
| Agent chat pointed at Primr | Primr Zero | No Primr model API spend; verify host plan allowance | Evidence bundle + host-written sourced dossier |
| Terminal or script | Provider-backed | Billable after a fresh quote and explicit approval | Primr Strategic Overview + strategy artifacts |
Explicit primr draft --local BUNDLE | Installed model at your configured runtime | $0 model API spend when that runtime executes without billing | Cited, unvalidated draft Markdown + DOCX from captured prep evidence |
Both paths can deliver a Strategic Overview and AI Strategy as Markdown and DOCX (on the Zero path, primr render <file>.md converts host Markdown to DOCX at $0). The provider-backed path additionally owns its measured synthesis, cross-validation, usage accounting, and recovery stages. A configured API key is capability, not consent to spend.
Primr prefers a validated zero-incremental-cost route when the current agent host or local environment can support the full artifact contract honestly. When provider APIs are required, the Standard recipe targets the best complete report and default strategy artifacts it can produce for approximately $1; the exact dry-run estimate remains authoritative and execution still requires explicit approval.
Point a capable agent at this repository:
primr "ExampleCo" https://example.coThe agent uses Primr Zero unless you explicitly request paid, metered, provider-backed, or premium execution. Its primr prep collection is already noninteractive and needs no approval flag. Routing, confirmation rules, MCP setup, and host handoff live in Agent Integration and Zero-Cost / Primr Zero.
For a smaller draft using an installed local model, run primr draft --local BUNDLE --dry-run, then remove --dry-run to execute. This also supports an explicitly configured private-network inference box. The draft records evidence coverage, model, quantization, runtime, and zero model API spend. It does not run Primr's external research or validation stages; review each claim against its displayed source excerpt. See local draft setup and limits.
primr "ExampleCo" https://example.co --dry-run --budget 10
primr "ExampleCo" https://example.co # foreground, then approve
primr "ExampleCo" https://example.co --skip-confirm # automation, after approval--skip-confirm is the approval signal for a noninteractive or background launch of the standard provider-backed commands. Use it only after a person has reviewed and approved the fresh quote. The experimental primr orchestrate command is the exception: its noninteractive approval and spend ceiling is --max-cost <usd> after the exact dry run is approved.
Mode matrix, platforms, strategy types, and cost controls: Run Modes and Costs.
primr recon / primr prepprimr init installs browser deps for scrape tiersuv tool install --python 3.15 primr
primr --versionWith pipx, use pipx install --python python3.15 primr and an installed Python 3.15. Plain pip install primr also works inside a Python 3.11 through 3.15 virtual environment. Download and inspect convenience installers before running them. For those scripts, upgrades, PATH troubleshooting, and source-checkout setup, see Installation and Upgrades.
Provider-backed setup only when you want billable runs:
primr init
primr doctorKeys and full config: API Key Setup | OpenRouter Gateway | Configuration.
| Need | Command |
|---|---|
| Agent-host dossier (Zero by default) | primr "Company" https://company.com |
| Keyless evidence bundle | primr prep "Company" https://company.com |
| Estimate a paid run with a ceiling | primr "Company" https://company.com --dry-run --budget 10 |
| Strategic Overview only | primr "Company" https://company.com --no-ai-strategy |
| Site corpus only | primr "Company" https://company.com --mode scrape |
| DNS only (no keys) | primr recon company.com |
| Skills pack | primr skills "Company" https://company.com |
| Markdown → DOCX/TXT ($0) | primr render "output/report.md" |
| Strategy on existing report | primr --ai-strategy-only "output/report.md" --dry-run |
| Check or install an update | primr update --check / primr update |
Focused help: primr --help. Everything: primr --help-all.
Billable runs need a fresh --dry-run estimate and explicit approval. A --budget 10 cap sets a $10 ceiling for that Primr run, not a $10 target or permission to launch. The preview reports whether the estimate fits, and an oversized plan is not launch-ready. Unattended execution stays fail closed unless it carries the command-specific approval signal. See Run Modes and Costs for the complete policy.
Default: customer-facing files under output/, diagnostics under working/.
<Company>_Strategic_Overview_<date>.md / .docx<Company>_AI_Strategy_<date>.md / .docx (unless --no-ai-strategy)run_manifest.json (estimate, approval, audit)Agent inventory (paths/roles only, no report body): primr://output/artifacts/by_job/{job_id}. Full artifact and recovery guides: Artifacts · Recovery.
| Topic | Guide |
|---|---|
| Product and delivery contract | COMPANY_ANALYST_PRODUCT_CONTRACT |
| Installation and upgrades | INSTALLATION |
| Run modes and costs | RUN_MODES |
| Primr Zero / host-assisted | ZERO_COST |
| Agent / MCP / A2A | AGENT_INTEGRATION · API |
| API keys | API_KEYS |
| Optional OpenRouter gateway | OPENROUTER |
| Configuration | CONFIG |
| Artifacts | ARTIFACTS |
| Skill packs | SKILL_PACK |
| Security | SECURITY |
| Contributing / architecture | CONTRIBUTING · ARCHITECTURE |
| Direction and next changes | NEXT_STEPS · ROADMAP |
| Release history | CHANGELOG · GitHub releases |
Docs site index: docs/README.md.
Primr retrieves and analyzes public web content. You are responsible for site terms, provider costs, output accuracy, and legal fit. AI-generated analysis can be wrong or outdated. Verify important findings before acting on them.
Apache 2.0. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.