primr-research — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited primr-research (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill is a thin orchestrator over Primr MCP.
Use MCP resources to discover current behavior instead of assuming fixed costs, providers, or defaults from the skill text. full is the standard end-to-end workflow, premium is the higher-depth option, and scrape and deep are narrower research modes.
Research runs are async jobs. Start the run, then monitor status until terminal. Standard runs often take 35-50 minutes; premium multi-vendor runs can take 75-120 minutes.
primr://research/modes before advising on mode selection.scrape for first-party reconnaissance.deep when the site is blocked or low-signal.full for the default strategic analysis workflow.premium when the user explicitly wants maximum depth.Always call estimate_run before research_company, then state that the run incurs real API cost and wait for explicit user approval.
estimate_run(company_url="https://example.com", mode="full")
After user approval, call research_company and pass the approved max_estimated_cost_usd when available, then monitor with wait_for_status_change, check_jobs, or primr://research/status. Do not assume the client session will stay attached for the entire run.
research_company(company_name="ExampleCo", company_url="https://example.com", mode="full")
When the run completes, read primr://output/latest and summarize the next sensible action.
job_in_progress: report the existing run and monitor it instead of starting another.invalid_url or ssrf_blocked: require a valid public URL, or consider deep mode.rate_limit_exceeded: wait for the retry window.api_error: surface the provider error clearly and recommend retry or diagnostics.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.