other
- Location
SKILL.md:82- Finding
Export-Control Evasion Guidance Through Third-Country Transshipment
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 82-85
Vulnerability Type:other: Export-control evasion guidance
Risk Level: HighRelevant instruction, translated into English:
text 6. Breakthrough Paths and Strategic Recommendations Identify directions through which the company can break through: - Detour route: use third-country transshipment, technology licensing, or product design to circumvent controlled technologyTechnical Analysis
The Skill instructs the Agent to identify third-country transshipment as a method for circumventing controls on restricted technology. While lawful technology licensing and compliant product redesign can be legitimate risk-mitigation measures, third-country transshipment may be used to conceal the actual destination, end user, or end use of controlled products.
This instruction is not required to conduct a defensive technology supply-chain audit. It can cause the Agent to transform information about suppliers, controlled components, sanctions, and regulatory coverage into actionable circumvention recommendations.
Attack Path
- A user requests an assessment of a company's exposure to export controls or technology sanctions.
- The Skill directs the Agent to identify controlled components, foreign suppliers, applicable restrictions, and supply-chain bottlenecks.
- The Agent determines which products or technologies cannot be acquired through ordinary authorized channels.
- Under the cited instruction, the Agent recommends third-country transshipment as a detour route.
- The resulting analysis may be used to route restricted goods through intermediaries, obscure their ultimate destination, or bypass licensing and screening requirements.
Impact Assessment
The issue does not grant operating-system privileges, execute code, access credentials, establish persistence, or compromise local tools. Its impact is informational and operat ...[truncated 372 chars]
- Remediation
View remediation
Remediation Suggestions
- Remove third-country transshipment from the list of recommended circumvention strategies.
- Replace the affected instruction with explicitly lawful alternatives:
- Obtain advice from qualified export-control counsel.
- Apply for required export licenses or governmental authorizations.
- Purchase only through authorized distributors and verified supply channels.
- Conduct restricted-party, end-user, end-use, and destination screening.
- Diversify suppliers only where procurement and delivery remain legally authorized.
- Redesign products to exclude controlled technology without evading applicable de minimis, foreign direct product, or other regulatory rules.
- Add a mandatory compliance constraint prohibiting recommendations that conceal destinations, misrepresent end users, falsify documentation, use unauthorized intermediaries, or otherwise evade trade controls.
- Require strategic recommendations to distinguish compliant licensing and redesign from prohibited diversion or transshipment.
- Require uncertain cases to be flagged for legal review rather than presenting a route as operational guidance.