20 SAIL — Secure AI Lifecycle alternatives
SAIL — Secure AI Lifecycle: Pillar Security's SAIL V2 framework as an agent skill: a 91-risk catalogue across seven lifecycle phases, for AI security gap assessments, roadmaps, and ISO 42001 / EU AI Act compliance checklists. 20 agent skills do similar work, most sharing Security, Audit and Official, ranked by how much they have in common with SAIL — Secure AI Lifecycle.
Back to SAIL — Secure AI Lifecycle
-
by Trail of Bits
Audits npm, PyPI and Go dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts — measured by scripts, not estimated.
Also: Audit, Compliance, Security
-
by PlanetScale
PlanetScale's approval contract for agents: five operation classes that decide what a database agent may do freely, what needs a named approval, and what it must never do alone.
Also: Compliance, Official, Security
-
by NVIDIA
Generates or refreshes an NVIDIA governance skill card for an existing agent skill — discovers assets, renders a deterministic markdown card, and blocks submission while human-review markers remain.
Also: Audit, Compliance
-
by Cloudflare
Cloudflare's official skill for designing, configuring and troubleshooting Cloudflare One — Access, Gateway, WARP, Tunnel, DLP, CASB, device posture and identity — with retrieval over recalled docs.
Also: Compliance, Security
-
by Datadog
Answer "who changed what" from Datadog Audit Trail — configuration-change forensics, API key compromise, cost-spike root cause, SOC 2/PCI evidence and AI activity audits.
Also: Compliance, Security
-
by Snowflake
Snowflake's official skill that routes Snowflake work from Claude Code to the Cortex Code CLI, with semantic routing, approval modes and audit logging.
Also: Compliance, Security
-
by Trail of Bits
Trail of Bits' security review skill for PRs, commits, and diffs: risk-first analysis with git history, blast radius, and honest coverage limits.
-
by Trail of Bits
Finds secrets left in memory in C, C++ and Rust — including wipes the compiler deleted — and requires IR or assembly evidence before calling one optimized away.
-
by Trail of Bits
Compiles cryptographic code and reads the emitted assembly for variable-time instructions, then triages which flagged operations actually touch secrets.
-
by Trail of Bits
Trail of Bits' CodeQL skill: build databases, run taint-tracking and data-flow queries across eight languages, and model project-specific sources and sinks.
-
by Trail of Bits
Trail of Bits' skill for writing production-quality Semgrep rules — pattern design, taint mode for data-flow bugs, and mandatory test-driven validation.
-
by Firebase
Firebase's official red-team skill for auditing Firestore and Cloud Storage security rules — hunting privilege escalation, create/update bypasses and resource-exhaustion holes.
-
by Sentry
Audit GitHub Actions workflows for the exploitation patterns that leak secrets or allow code execution from a fork.
-
by Sentry
Audit the changes on your current branch for bugs, security vulnerabilities, and quality problems before you push.
-
by Inngest
Build crash-safe AI agents on AgentKit and step.ai — durable tool calls, human-in-the-loop approval, realtime progress, and when not to reach for an agent loop at all.
-
by Composio
Composio's official skill for reaching 1,000+ external apps from an agent — CLI-driven actions, Tool Router sessions, per-user auth and trigger events.
-
by VoltAgent
VoltAgent's official conventions skill — when to reach for an agent versus a workflow, the expected project layout, and the core snippets for agents, workflows, memory and servers.
-
by Better Auth
Adds real 2FA to a Better Auth app — TOTP, email/SMS OTP, backup codes, trusted devices — including the sign-in interrupt and the encryption-at-rest details.
-
by Better Auth
Credential auth done to spec in Better Auth: verification email, reset flow, token and session handling, password policy and custom hashing.
-
by Better Auth
The reference an agent needs to configure Better Auth correctly: adapters, session strategy, hooks, plugins, type safety and the gotchas that bite in production.
