CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

macos-spm-app-packaging

Scaffold, build, sign, and package SwiftPM macOS apps without Xcode projects.

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is macos-spm-app-packaging in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a strong, executable skill document: a clear two-step workflow, copy-paste commands, explicit validation checkpoints, and a genuinely useful error-recovery table. Its only real weaknesses are a slightly dispensable sentence or two and one orphaned bundle file (references/scaffold.md) that is never referenced.

Suggestions

Link references/scaffold.md from SKILL.md (e.g., in the bootstrap step: "Or scaffold manually — see references/scaffold.md") so the bundled reference is discoverable.

Tighten the Validation Checkpoints intro sentence and the Notes section, which partially restate information already conveyed by the workflow and Templates sections.

Consider moving the Common Notarization Failures table to references/release.md and keeping a one-line pointer, keeping the main body focused on the happy path.

DimensionReasoningScore

Conciseness

The body is lean and imperative with no explanations of concepts Claude already knows — every section is commands, file paths, or operational notes, matching "Efficient; minor instances of over-explanation that could be trimmed". Not 5 because a few sentences are dispensable (e.g., "Run these after key steps to catch failures early before proceeding to the next stage" and parts of the Notes section restate what the Templates list already implies); not 3 because there is no genuinely unnecessary explanation or padding.

4 / 5

Actionability

Guidance is fully executable: the Minimum End-to-End Example is copy-paste-ready bash (cp -R, sed, swift build, Scripts/compile_and_run.sh) and the validation section gives exact commands (codesign -dv --verbose=4, spctl --assess, stapler validate) covering the common cases. Fits the level-5 anchor "Fully executable; copy-paste ready code or commands; specific examples cover the common cases".

5 / 5

Workflow Clarity

The Two-Step Workflow is clearly sequenced, the Validation Checkpoints section gives explicit validation commands after each risky stage (packaging, signing, notarization/stapling), and the Common Notarization Failures table provides symptom→cause→recovery feedback loops. This matches the level-5 anchor "Clear sequence with explicit validation steps; feedback loops for error recovery".

5 / 5

Progressive Disclosure

The Overview clearly signals one-level-deep references (references/packaging.md and references/release.md, both verified to exist) and the Templates section accurately maps every assets/templates/ file with its purpose. Not 5 because references/scaffold.md exists in the bundle but is never linked from SKILL.md, leaving it undiscoverable, and the notarization failure table is borderline content that could live in the packaging reference; not 3 because the structure and signaling are otherwise good with no inlined content that clearly belongs in a separate file.

4 / 5

Total

18

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, uses natural third-person action verbs, and defines a distinct niche, but it lacks any explicit 'Use when...' trigger clause, which both caps completeness and leaves some natural trigger terms (notarize, .app bundle, appcast) unmentioned.

Suggestions

Append an explicit trigger clause, e.g. "Use when the user wants to build, package, sign, or notarize a macOS app with SwiftPM instead of an Xcode project."

Add natural trigger terms users would actually say — "notarize/notarization", ".app bundle", "codesign", "appcast/Sparkle updates" — to broaden keyword coverage.

Consider mentioning the appcast/update and notarization capabilities in the action list so the description reflects the skill's full scope.

DimensionReasoningScore

Specificity

"Scaffold, build, sign, and package SwiftPM macOS apps" lists several specific concrete actions in a named domain, matching the level-4 anchor ("Lists several specific actions; minor gaps in coverage"). Not 5 because coverage has gaps (notarization, appcast generation, .app bundle creation are handled by the skill but not named); clearly above 3 since more than 1-2 actions are given.

4 / 5

Completeness

The "what" is clear ("Scaffold, build, sign, and package SwiftPM macOS apps without Xcode projects") but there is no "Use when..." clause or equivalent explicit trigger guidance, which the judging guidelines cap at 3. It is not 4 because the "when" is entirely implicit, and not 2 because the "what" is concrete and specific.

3 / 5

Trigger Term Quality

Natural terms users would say are present ("macOS apps", "SwiftPM", "Xcode", "build", "sign", "package"), matching "Good keyword coverage; a few natural terms missing". Not 5 because common variations like "notarize", "notarization", ".app bundle", "dmg", or "Swift package" are absent; above 3 because the core vocabulary is well covered rather than missing common variations.

4 / 5

Distinctiveness Conflict Risk

"SwiftPM macOS apps without Xcode projects" carves out a clear niche with distinct triggers and minimal conflict risk with other skills, matching the level-5 anchor. Neighboring anchor 4 requires "minor overlap risk with closely related skills", which does not fit better since no common skill shares this exact trigger space.

5 / 5

Total

16

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 14 deeper-than-1-level

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills-claude/skills/macos-spm-app-packaging/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.