CtrlK
BlogDocsLog inGet started
Tessl Logo

signing-entitlements

Inspect macOS signing, entitlements, and Gatekeeper issues. Use when diagnosing code signing, sandbox, hardened runtime, or trust failures.

68

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, mostly lean diagnostic skill with concrete commands and a clear workflow. The main gaps are minor: a command duplicated across two sections, no concrete repair-command examples in the fix step, and no explicit post-repair validation checkpoint.

Suggestions

Add a concrete re-signing/repair command example to step 4 (e.g., codesign --sign <identity> --entitlements <plist> --options runtime <app>) so the 'minimum fix path' is executable rather than only described.

Add an explicit validation/feedback step — e.g., re-run codesign -dvvv and spctl -a -vv after any repair to confirm the fix — to close the workflow loop and lift workflow_clarity.

De-duplicate the commands shared between 'Workflow' step 2 and 'Useful Commands' (codesign, spctl, plutil) to tighten token efficiency.

DimensionReasoningScore

Conciseness

The body is lean and assumes Claude's competence (no explanations of what codesigning or Gatekeeper are), but three commands (codesign, spctl, plutil) are duplicated between 'Workflow' step 2 and the 'Useful Commands' section — a minor trim opportunity matching the 'efficient; minor instances that could be trimmed' anchor; below 5 because of that duplication.

4 / 5

Actionability

Diagnostic commands are concrete and copy-paste ready ('codesign -dvvv --entitlements :- <path>', 'spctl -a -vv <path>', 'security find-identity -p codesigning -v'), matching 'mostly executable guidance; minor gaps'; below 5 because step 4 ('Explain the minimum fix path') only instructs Claude to 'show the shortest set of validation or repair commands' without any concrete repair/re-signing command examples.

4 / 5

Workflow Clarity

A clear four-step sequence (Inspect → Read signing details → Classify failure → Explain fix) with a seven-item classification checklist, matching 'clear sequence with most checkpoints present; minor validation gaps'; below 5 because there is no explicit validation/feedback step (e.g., re-running codesign/spctl after a repair to confirm the fix). The destructive/batch cap does not apply since this is a read-only diagnostic skill.

4 / 5

Progressive Disclosure

The skill is under 50 lines, single-purpose, and has no bundle files (references/scripts/assets absent), yet is organized into clear sections (Quick Start, Workflow, Useful Commands, Guardrails, Output Expectations), matching the under-50-lines simple-skill exception that allows a 5 with well-organized sections.

5 / 5

Total

17

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, concise description that clearly states what the skill does and when to use it, with specific domain trigger terms and low conflict risk. Its only notable gap is the omission of 'notarization' as a trigger keyword, and a slightly limited action-verb vocabulary.

DimensionReasoningScore

Specificity

Quotes 'Inspect macOS signing, entitlements, and Gatekeeper issues' and 'diagnosing code signing, sandbox, hardened runtime, or trust failures' — two concrete actions (inspect, diagnose) over many specific domain items, matching the 'several specific actions; minor gaps' anchor; below 5 because the action verbs themselves are limited rather than a comprehensive action set.

4 / 5

Completeness

Explicitly answers both: 'what' (Inspect macOS signing, entitlements, and Gatekeeper issues) and 'when' (Use when diagnosing code signing, sandbox, hardened runtime, or trust failures) with concrete trigger phrases, matching the top anchor; not below because neither element is vague or missing.

5 / 5

Trigger Term Quality

Natural terms a macOS developer would say are well covered ('code signing', 'entitlements', 'Gatekeeper', 'sandbox', 'hardened runtime', 'trust failures'), matching 'good keyword coverage; a few natural terms missing'; below 5 because 'notarization' — a very common trigger term in this domain — is absent.

4 / 5

Distinctiveness Conflict Risk

Targets a clear niche (macOS code signing / Gatekeeper / hardened runtime) with distinct, specific triggers and minimal overlap with other skills, matching the 'clear niche with distinct triggers; minimal conflict risk' anchor.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
openai/plugins
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.