CtrlK
BlogDocsLog inGet started
Tessl Logo

packaging-notarization

Prepare macOS packaging and notarization workflows. Use when archiving apps, validating bundles, or explaining distribution-only failures.

66

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/build-macos-apps/skills/packaging-notarization/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

72%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A concise, well-organized instruction-only skill with a clear sequenced workflow and no padding. It loses points on actionability and workflow clarity because it describes what to inspect and validate in the abstract without providing the concrete commands or explicit validate-and-retry checkpoints that distribution work benefits from.

Suggestions

Add the actual executable validation commands (e.g. `codesign --verify --deep --strict ...`, `spctl --assess --type execute ...`, `xcrun notarytool submit ...`) instead of only gesturing at 'minimum follow-up validation commands', to lift actionability toward copy-paste ready guidance.

Insert an explicit validation checkpoint with a validate→fix→retry loop into the workflow (e.g. step 2.5: run codesign/spctl checks, and on failure fix entitlements/signing then re-check before proceeding), to satisfy the workflow-clarity feedback-loop requirement for risky distribution operations.

Optionally list the concrete artifacts/paths to inspect (e.g. Contents/Frameworks/*, the embedded entitlements plist, Info.plist) so 'Inspect the artifact' is executable rather than abstract.

DimensionReasoningScore

Conciseness

The body is lean and efficient — terse bullets like 'Validate app bundle structure.' and 'Check nested frameworks, helper tools, and entitlements.' add only what Claude doesn't already know, with no concept padding, matching the 'lean and efficient' anchor.

3 / 3

Actionability

It gives concrete domain direction ('Validate app bundle structure', 'Check nested frameworks... and entitlements') but never supplies actual executable commands — even where it gestures at 'minimum follow-up validation commands' without stating them — fitting the score-2 'some concrete guidance but incomplete' anchor.

2 / 3

Workflow Clarity

The numbered 1–4 sequence is clearly laid out, but for a distribution/validation workflow it lacks an explicit executable validation checkpoint with a validate→fix→retry feedback loop, which per the rubric caps workflow clarity at 2 rather than 3.

2 / 3

Progressive Disclosure

The skill is under 50 lines, single-purpose, and cleanly organized into Quick Start, Workflow, Guardrails, and Output Expectations sections with no (non-existent) bundle files needed, meeting the rubric's allowance for short simple skills to score 3 on organization alone.

3 / 3

Total

10

/

12

Passed

Description

85%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A well-scoped, third-person description that clearly states both capability and explicit use-when triggers, with a distinct macOS-distribution niche. Its main weakness is trigger-term breadth: it covers the core terms but omits common variations users might actually say.

DimensionReasoningScore

Specificity

Names several concrete actions within a defined domain — 'archiving apps, validating bundles, or explaining distribution-only failures' — matching the score-3 anchor of multiple specific concrete actions rather than the partial listing at score 2.

3 / 3

Completeness

Explicitly answers both what ('Prepare macOS packaging and notarization workflows') and when via an explicit 'Use when archiving apps, validating bundles, or explaining distribution-only failures' trigger clause, satisfying the score-3 anchor and the 'Use when...' requirement.

3 / 3

Trigger Term Quality

Uses natural developer terms ('archiving apps', 'validating bundles', 'distribution-only failures') but lacks common variations like '.app', 'codesign', 'notarize', or 'App Store', so it sits at the 'some relevant keywords but missing common variations' anchor rather than full coverage.

2 / 3

Distinctiveness Conflict Risk

The 'macOS packaging and notarization' niche and 'distribution-only failures' scope form a clear, distinct trigger set unlikely to fire for generic build or run skills, matching the score-3 'clear niche' anchor.

3 / 3

Total

11

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
openai/plugins
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.