pillar-labs/sail-skill
148 stars · Last commit 2026-07-07
SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, security roadmaps, and compliance checklists. Installs on Claude Code, Codex, ChatGPT, Antigravity, and any SKILL.md-compatible agent.
README preview
<p align="center">
<picture>
<source media="(prefers-color-scheme: dark)" srcset="assets/sail-logo-dark.png">
<img src="assets/sail-logo-light.png" alt="SAIL — Secure AI Lifecycle" width="346">
</picture>
</p>
# SAIL Skill — Secure AI Lifecycle by Pillar Security
An agent skill that applies **SAIL V2** — [Pillar Security](https://www.pillar.security)'s Secure AI Lifecycle framework — to real systems. It bundles the full SAIL V2 risk catalog (**91 risks across 7 lifecycle phases**, each with mitigations and standards mappings) as reference files the agent reads on demand, so every answer is grounded in the actual catalog: real SAIL IDs, real mappings, no hallucinated controls.
This repository is also a **Claude Code plugin marketplace** — one-command install for Claude Code, prebuilt archives for everything else.
## What it does
The skill triggers whenever you work on AI/agent security. It can:
- **Assess an agent or system** — full SAIL gap analysis with a component chart and all 91 risks dispositioned
- **Build a security roadmap** and **maturity assessment**
- **Generate compliance checklists** (ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1)