sail plugin
Apply the SAIL V2 (Secure AI Lifecycle) framework to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists (ISO/IEC 42001, EU AI Act, OWASP, DASF, AIUC-1), control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.
How to install the sail plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add pillar-labs/sail-skill
/plugin install sail@pillar-securityWhat's inside sail
5 parts read from the plugin's own files.
Commands 4
Run as /sail:name- /sail:assess[path or design doc — defaults to the current repo]
Full SAIL V2 gap analysis of the AI agent/system in the current repo — component inventory, all 91 catalog risks dispositioned, prioritized recommendations. Writes SAIL-assessment.md.
- /sail:comply[framework(s) — e.g. eu-ai-act iso-42001 owasp dasf aiuc-1]
SAIL V2 compliance checklist — ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1. All five frameworks by default, or only those named.
- /sail:rfp[security|platform] [vendor name / focus area]
Vendor RFP questionnaire from the SAIL V2 catalog — security-vendor coverage questionnaire by default, platform-vendor framing on request.
- /sail:roadmap[scope hints — e.g. "org-wide", controls already in place]
7-phase SAIL V2 security roadmap plus per-phase maturity profile, built from the current repo and conversation context.
Skills 1
Claude loads it when the task matches- sail
Apply the SAIL (Secure AI Lifecycle) V2 framework by Pillar Security to secure AI applications and agents. Use this skill whenever the user asks about AI or agent security — assessing an AI system or agent architecture for risks, building an AI security roadmap or maturity assessment, writing or reviewing an AI security policy, creating compliance checklists (ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1), prioritizing AI security controls, evaluating AI vendors or tools (RFPs, security questionnaires), securing MCP servers, agent identities, or LLM apps, or asking what "SAIL" or a "SAIL ID" (e.g., SAIL 5.17) means. Also use it when the user is building agentic features and wants to know which security risks apply — even if they never say "SAIL".
Using sail in Claude Code
Type a command in a Claude Code session:
/sail:assess [path or design doc — defaults to the current repo]
/sail:comply [framework(s) — e.g. eu-ai-act iso-42001 owasp dasf aiuc-1]
/sail:rfp [security|platform] [vendor name / focus area]Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update sail@pillar-security
- Refresh the marketplace
- /plugin marketplace update pillar-security
- Turn it off for now
- /plugin disable sail@pillar-security
- Remove it
- /plugin uninstall sail@pillar-security
Skills in sail
- sailpillar-labs/sail-skill
Apply the SAIL (Secure AI Lifecycle) V2 framework by Pillar Security to secure AI applications and agents. Use this skill whenever the user asks about AI or agent security — assessing an AI system or agent architecture for risks, building an AI security roadmap or maturity assessment, writing or reviewing an AI security policy, creating compliance checklists (ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1), prioritizing AI security controls, evaluating AI vendors or tools (RFPs, security questionnaires), securing MCP servers, agent identities, or LLM apps, or asking what "SAIL" or a "SAIL ID" (e.g., SAIL 5.17) means. Also use it when the user is building agentic features and wants to know which security risks apply — even if they never say "SAIL".
13 files108stars
sail plugin questions
How do I install the sail plugin?
In Claude Code run /plugin marketplace add pillar-labs/sail-skill, then /plugin install sail@pillar-security.
What does the sail plugin include?
sail bundles 4 commands, 1 skill.
What commands does the sail plugin add?
It adds /sail:assess, /sail:comply, /sail:rfp, /sail:roadmap. Run them in Claude Code with the plugin prefix, for example /sail:assess.
How do I update or remove the sail plugin?
Update it with claude plugin update sail@pillar-security in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall sail@pillar-security.