Skip to content
Security
Command

/comply

SAIL V2 compliance checklist — ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1. All five frameworks by default, or only those named.

From plugin
sail-skill
1083 skills3 commands
> /plugin marketplace add pillar-labs/sail-skill
> /plugin install sail@pillar-security

Command definition

comply.md
description: SAIL V2 compliance checklist — ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1. All five frameworks by default, or only those named.
argument-hint: "[framework(s) — e.g. eu-ai-act iso-42001 owasp dasf aiuc-1]"

Run the SAIL V2 **"Generate a compliance checklist"** workflow immediately. Do NOT run the interactive intake and do NOT ask scoping questions.

**Frameworks:** those named in "$ARGUMENTS" if non-empty. Accept loose spellings (`eu-ai-act`/`euaiact`, `iso-42001`/`iso42001`, `owasp`, `dasf`, `aiuc-1`/`aiuc1`); if an argument doesn't match any of the five, use the closest framework and note the interpretation in the output header. If "$ARGUMENTS" is empty, cover **all five frameworks** — one section per framework from a single catalog sweep.

Follow `${CLAUDE_PLUGIN_ROOT}/skills/sail/SKILL.md`, section **"Generate a compliance checklist"**:

1. Read `${CLAUDE_PLUGIN_ROOT}/skills/sail/references/risk-index.md`, then search the phase files under `${CLAUDE_PLUGIN_ROOT}/skills/sail/references/` for each framework's tag in the Standards Mapping column. 2. Present the matching risks as a control checklist in **that framework's own language** — article/control numbers first, SAIL IDs as cross-reference. 3. State plainly in the document: mappings indicate alignment, not automatic compliance.

@pillar-labs
Ships withsail-skill

An agent skill that applies SAIL V2 — Pillar Security's Secure AI Lifecycle framework — to real systems.

Stars on GitHub

Momentum

stars in total
108
Star history of pillar-labs/sail-skill on GitHub, a chart by star-history.com

Other commands on sail-skill.

assess

assess

Command

Full SAIL V2 gap analysis of the AI agent/system in the current repo — component inventory, all 91 catalog risks dispositioned,…

@pillar-labs@pillar-labsInstall Command
rfp

rfp

Command

Vendor RFP questionnaire from the SAIL V2 catalog — security-vendor coverage questionnaire by default, platform-vendor framing on…

@pillar-labs@pillar-labsInstall Command

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command