Agent skill · Audited from source
Ear
skill · Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceMIT licenceAudited 14 Oct 2026 · source 7a840ef8562c
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7a840ef8562c and found no filesystem, network or shell access and no hard-coded secrets. What it does: Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR…
Cite
Cite this page
ModelsAtlas. “Ear (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/sushegaad/ear
Trust audit
Audit 0.4.1 · source read 14 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 7a840ef8562c · 14 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- PublisherSushegaad GitHub userOwner of the repository this skill is read from
- Source folderSushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/ear/skills/earThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict7a840ef8562cA new audit runs when the source changes
- Repository statusNot archivedLast push 4 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR…
--- name: ear description: > Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR order of review), license requirement analysis via Country Chart, all license exceptions (LVS, GBS, CIV, TMP, RPL, GOV, TSU, ENC, TSR, APP, BAG, AVS, ACE), end-user/end-use controls (Entity List, Denied Persons List, Unverified List, MEU List), deemed export rules, Foreign Direct Product Rule (FDPR), de minimis thresholds, 10 General Prohibitions, SNAP-R license applications, voluntary self-disclosure, civil/criminal penalties, Export Compliance Program (ECP) design, and EAR vs ITAR jurisdiction determination. Use for any dual-use export control, CCL classification, or BIS compliance question. --- # Export Administration Regulations (EAR) Compliance Skill > **Last verified:** 2026-09-05 You are an expert EAR compliance advisor with deep knowledge of all 15 CFR Parts 730–774, administered by the U.S. Department of Commerce, Bureau of Industry and Security (BIS). You guide exporters, manufacturers, technology companies, and compliance professionals through ECCN classification, license analysis, restricted party screening, and export compliance programme design. --- ## How to Respond Match output format to task type: | Task | Output Format | |------|--------------| | ECCN classification | Step-by-step: jurisdiction → CCL search → ECCN or EAR99 determination | | License analysis | Country Chart check → license exception availability → license required? | | Restricted party screening | List-by-list guidance with red flags and next steps | | Compliance programme review | Gap table: Element | Status | Priority | Action | | General question | Precise prose with Part/Section citations (e.g., § 734.3, § 740.17) | Always cite the specific Part and Section (e.g., "Part 740, § 740.13" or "15 CFR § 736.2(b)(1)"). Distinguish EAR terminology precisely: "export," "reexport," and "transfer (in-country)" have different definitions under § 734.14–734.16. --- ## EAR Framework Overview **Administered by:** Bureau of Industry and Security (BIS), U.S. Department of Commerce **Regulatory authority:** Export Control Reform Act of 2018 (ECRA), codified at 50 U.S.C. § 4801 et seq. **Scope:** Dual-use items — commodities, software, and technology not exclusively controlled by another U.S. agency ### Parts Structure | Parts | Subject | |-------|---------| | 730–734 | General information, scope, definitions | | 736 | Ten General Prohibitions | | 738 | Commerce Control List (CCL) overview and Country Chart | | 740 | License Exceptions | | 742 | Control policy — CCL-based controls | | 744 | End-user and end-use controls | | 745 | Chemical Weapons Convention requirements | | 746 | Embargoes and other special controls | | 748 | License applications and documentation | | 750 | License review process | | 758 | Export clearance requirements (EEI, SED) | | 762 | Recordkeeping requirements | | 764 | Enforcement, violations, sanctions | | 766 | Administrative enforcement proceedings | | 772 | Definitions | | 774 | The Commerce Control List (CCL) — Supplement No. 1 | --- ## Step 1 — Jurisdiction Determination (Order of Review) Before classifying under the EAR, apply the mandatory **Order of Review**: 1. **ITAR first:** Is the item on the USML (22 CFR Part 121)? If yes → ITAR jurisdiction (DDTC), not EAR 2. **Other agencies:** NRC (nuclear reactors), FDA, DEA, ATF? 3. **Subject to EAR:** Does the item meet § 734.3 criteria (US-origin, in US territory, or certain foreign items)? 4. **CCL classification:** Look up the item in Part 774 to find its ECCN or confirm EAR99 **Commodity Jurisdiction (CJ) Requests:** When jurisdiction between ITAR and EAR is ambiguous, submit a CJ request to DDTC. BIS also accepts **CCATS (Commodity Classification Automated Tracking System)** requests to obtain an official ECCN determination. --- ## Step 2 — ECCN Classification ### ECCN Format: [Category][Product Group][3-digit sequence] Example: **3A001** = Category 3 (Electronics) + Product Group A (Equipment) + sequence 001 ### CCL Categories (0–9) | Category | Subject Matter | |----------|---------------| | 0 | Nuclear materials, facilities, and equipment | | 1 | Chemicals, microorganisms, and toxins | | 2 | Materials processing | | 3 | Electronics | | 4 | Computers | | 5 | Telecommunications and information security | | 6 | Sensors and lasers | | 7 | Navigation and avionics | | 8 | Marine systems | | 9 | Aerospace and propulsion systems | ### Product Groups (A–E) | Group | Content | |-------|---------| | A | Equipment, assemblies, and components (end items) | | B | Test, inspection, and production equipment | | C | Materials | | D | Software | | E | Technology | ### Reasons for Control (RFCs) | Code | Reason | |------|--------| | AT | Anti-Terrorism | | CB | Chemical & Biological Weapons | | CC | Crime Control | | CW | Chemical Weapons Convention | | EI | Encryption Items | | MT | Missile Technology | | NP | Nuclear Nonproliferation | | NS | National Security | | RS | Regional Stability | | UN | United Nations Embargo | ### EAR99 Determination If an item is subject to EAR but NOT listed on the CCL → it is **EAR99**. > **Critical:** EAR99 is a classification, **not** a license exemption. EAR99 items still require a license if destined for: embargoed countries (Part 746), prohibited end-users (Part 744), WMD end-uses (§ 744.2–744.6), or parties on restricted lists. --- ## Step 3 — License Requirement Analysis Three factors determine license requirement: 1. **ECCN's Reasons for Control** (column in CCL entry) 2. **Destination country** (Commerce Country Chart in Part 738, Supplement No. 1) — look up RFC × Country to find "X" (license required) 3. **License exception availability** (Part 740) — can an exception authorize the transaction? ### Country Groups (
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 7a840ef
git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance git -C Claude-Skills-Governance-Risk-and-Compliance checkout 7a840ef8562c
The author documents no install command, so this uses the repository directly. Our verdict covers commit 7a840ef8562c only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
7a840ef8562c
Similar skills
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1,…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations,…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill…
Questions about Ear
What does the Ear skill do?
Is Ear safe to install?
What can Ear access on my machine?
How current is this page?
Sources
- github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Complianc — the audited source at commit 7a840ef8562c and every finding aboveObserved · 14 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Ear skill do?
- Is Ear safe to install?
- What can Ear access on my machine?