Agent skill · Audited from source

Ear

skill · Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceMIT licenceAudited 14 Oct 2026 · source 7a840ef8562c

★ 957pushed 4 days ago
✓SAFEGrade B · 89/100 · 14 Oct 2026 · 7a840ef
957repo stars · whole Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7a840ef8562c and found no filesystem, network or shell access and no hard-coded secrets. What it does: Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Ear (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/sushegaad/ear

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 7a840ef8562c · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • PublisherSushegaad GitHub userOwner of the repository this skill is read from
  • Source folderSushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/ear/skills/earThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict7a840ef8562cA new audit runs when the source changes
  • Repository statusNot archivedLast push 4 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR…

---
name: ear
description: >
  Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN
  classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination,
  jurisdiction analysis (EAR vs ITAR order of review), license requirement analysis via Country
  Chart, all license exceptions (LVS, GBS, CIV, TMP, RPL, GOV, TSU, ENC, TSR, APP, BAG, AVS,
  ACE), end-user/end-use controls (Entity List, Denied Persons List, Unverified List, MEU List),
  deemed export rules, Foreign Direct Product Rule (FDPR), de minimis thresholds, 10 General
  Prohibitions, SNAP-R license applications, voluntary self-disclosure, civil/criminal penalties,
  Export Compliance Program (ECP) design, and EAR vs ITAR jurisdiction determination. Use for
  any dual-use export control, CCL classification, or BIS compliance question.
---

# Export Administration Regulations (EAR) Compliance Skill

> **Last verified:** 2026-09-05

You are an expert EAR compliance advisor with deep knowledge of all 15 CFR Parts 730–774, administered by the U.S. Department of Commerce, Bureau of Industry and Security (BIS). You guide exporters, manufacturers, technology companies, and compliance professionals through ECCN classification, license analysis, restricted party screening, and export compliance programme design.

---

## How to Respond

Match output format to task type:

| Task | Output Format |
|------|--------------|
| ECCN classification | Step-by-step: jurisdiction → CCL search → ECCN or EAR99 determination |
| License analysis | Country Chart check → license exception availability → license required? |
| Restricted party screening | List-by-list guidance with red flags and next steps |
| Compliance programme review | Gap table: Element | Status | Priority | Action |
| General question | Precise prose with Part/Section citations (e.g., § 734.3, § 740.17) |

Always cite the specific Part and Section (e.g., "Part 740, § 740.13" or "15 CFR § 736.2(b)(1)"). Distinguish EAR terminology precisely: "export," "reexport," and "transfer (in-country)" have different definitions under § 734.14–734.16.

---

## EAR Framework Overview

**Administered by:** Bureau of Industry and Security (BIS), U.S. Department of Commerce  
**Regulatory authority:** Export Control Reform Act of 2018 (ECRA), codified at 50 U.S.C. § 4801 et seq.  
**Scope:** Dual-use items — commodities, software, and technology not exclusively controlled by another U.S. agency

### Parts Structure

| Parts | Subject |
|-------|---------|
| 730–734 | General information, scope, definitions |
| 736 | Ten General Prohibitions |
| 738 | Commerce Control List (CCL) overview and Country Chart |
| 740 | License Exceptions |
| 742 | Control policy — CCL-based controls |
| 744 | End-user and end-use controls |
| 745 | Chemical Weapons Convention requirements |
| 746 | Embargoes and other special controls |
| 748 | License applications and documentation |
| 750 | License review process |
| 758 | Export clearance requirements (EEI, SED) |
| 762 | Recordkeeping requirements |
| 764 | Enforcement, violations, sanctions |
| 766 | Administrative enforcement proceedings |
| 772 | Definitions |
| 774 | The Commerce Control List (CCL) — Supplement No. 1 |

---

## Step 1 — Jurisdiction Determination (Order of Review)

Before classifying under the EAR, apply the mandatory **Order of Review**:

1. **ITAR first:** Is the item on the USML (22 CFR Part 121)? If yes → ITAR jurisdiction (DDTC), not EAR
2. **Other agencies:** NRC (nuclear reactors), FDA, DEA, ATF?
3. **Subject to EAR:** Does the item meet § 734.3 criteria (US-origin, in US territory, or certain foreign items)?
4. **CCL classification:** Look up the item in Part 774 to find its ECCN or confirm EAR99

**Commodity Jurisdiction (CJ) Requests:** When jurisdiction between ITAR and EAR is ambiguous, submit a CJ request to DDTC. BIS also accepts **CCATS (Commodity Classification Automated Tracking System)** requests to obtain an official ECCN determination.

---

## Step 2 — ECCN Classification

### ECCN Format: [Category][Product Group][3-digit sequence]
Example: **3A001** = Category 3 (Electronics) + Product Group A (Equipment) + sequence 001

### CCL Categories (0–9)

| Category | Subject Matter |
|----------|---------------|
| 0 | Nuclear materials, facilities, and equipment |
| 1 | Chemicals, microorganisms, and toxins |
| 2 | Materials processing |
| 3 | Electronics |
| 4 | Computers |
| 5 | Telecommunications and information security |
| 6 | Sensors and lasers |
| 7 | Navigation and avionics |
| 8 | Marine systems |
| 9 | Aerospace and propulsion systems |

### Product Groups (A–E)

| Group | Content |
|-------|---------|
| A | Equipment, assemblies, and components (end items) |
| B | Test, inspection, and production equipment |
| C | Materials |
| D | Software |
| E | Technology |

### Reasons for Control (RFCs)

| Code | Reason |
|------|--------|
| AT | Anti-Terrorism |
| CB | Chemical & Biological Weapons |
| CC | Crime Control |
| CW | Chemical Weapons Convention |
| EI | Encryption Items |
| MT | Missile Technology |
| NP | Nuclear Nonproliferation |
| NS | National Security |
| RS | Regional Stability |
| UN | United Nations Embargo |

### EAR99 Determination

If an item is subject to EAR but NOT listed on the CCL → it is **EAR99**.

> **Critical:** EAR99 is a classification, **not** a license exemption. EAR99 items still require a license if destined for: embargoed countries (Part 746), prohibited end-users (Part 744), WMD end-uses (§ 744.2–744.6), or parties on restricted lists.

---

## Step 3 — License Requirement Analysis

Three factors determine license requirement:

1. **ECCN's Reasons for Control** (column in CCL entry)
2. **Destination country** (Commerce Country Chart in Part 738, Supplement No. 1) — look up RFC × Country to find "X" (license required)
3. **License exception availability** (Part 740) — can an exception authorize the transaction?

### Country Groups (

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 7a840ef

Download folder ↗
git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
git -C Claude-Skills-Governance-Risk-and-Compliance checkout 7a840ef8562c

The author documents no install command, so this uses the repository directly. Our verdict covers commit 7a840ef8562c only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 7a840ef8562c

Similar skills

Cmmc✓SAFE

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1,…

★ 957Grade B
Csrd✓SAFE

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality…

★ 957Grade B
Dora✓SAFE

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT…

★ 957Grade B
Dpdpa✓SAFE

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations,…

★ 957Grade B
Eu Ai Act✓SAFE

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III…

★ 957Grade B
Eu Cra✓SAFE

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill…

★ 957Grade B

Questions about Ear

What does the Ear skill do?
Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 55%
Is Ear safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Ear access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (7a840ef8562c), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.