CtrlK
BlogDocsLog inGet started
Tessl Logo

macos-packaging-notarization

Prepare macOS packaging and notarization workflows. Use when archiving apps, validating bundles, or explaining distribution-only failures.

58

Quality

66%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.agents/skills/macos-packaging-notarization/SKILL.md

The canonical home for this skill is packaging-notarization in openai/plugins

SKILL.md
Quality
Evals
Security

Quality

Content

57%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is concise and cleanly organized, but it stops at describing steps rather than giving concrete commands, and it omits validation/feedback loops that fragile packaging and notarization work requires.

Suggestions

Add concrete, copy-paste-ready commands for each step, e.g. `codesign -dv --verbose=4 path/to/App.app` and `xcrun notarytool submit App.zip --keychain-profile profile --wait`.

Insert explicit validation checkpoints with a fix-and-retry loop, e.g. verify nested signatures with `codesign --verify --deep --strict` before submission and re-check on failure.

Include a minimal example of inspecting bundle structure, such as `ls App.app/Contents/Frameworks` and `codesign -d --entitlements - App.app`.

DimensionReasoningScore

Conciseness

The ~40-line body is lean and well-sectioned with no padding and no explanation of concepts Claude already knows (e.g. what notarization is), so every token earns its place per the score-3 anchor.

3 / 3

Actionability

Lines like "Validate app bundle structure" and "Check nested frameworks, helper tools, and entitlements" describe rather than instruct, with no concrete commands or executable examples, matching the score-1 anchor.

1 / 3

Workflow Clarity

A 4-step sequence is present, but for fragile notarization/signing work there are no validation checkpoints or feedback loops (validate -> fix -> retry), which per the scoring notes caps this at 2.

2 / 3

Progressive Disclosure

It is a simple skill under 50 lines with no bundle files and clearly organized sections (Quick Start, Workflow, Guardrails, Output Expectations), which the scoring notes allow to score 3 without external references.

3 / 3

Total

9

/

12

Passed

Description

75%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is clear, third person, and explicitly pairs a what-statement with a Use-when trigger, giving it strong completeness and distinctiveness. It is held back only by somewhat abstract action phrasing and partial coverage of natural trigger terms.

Suggestions

Replace the abstract "Prepare ... workflows" with concrete verbs, e.g. "Archive apps into .xcarchives, validate .app bundles, and diagnose notarization failures."

Broaden trigger terms to include phrases users actually say: "notarize", "code signing", "hardened runtime", and ".app / .xcarchive".

DimensionReasoningScore

Specificity

"Prepare macOS packaging and notarization workflows" names the domain and a couple of actions (archiving, validating bundles), but "prepare workflows" is abstract rather than a list of multiple specific concrete actions, matching the score-2 anchor.

2 / 3

Completeness

It explicitly answers both what ("Prepare macOS packaging and notarization workflows") and when ("Use when archiving apps, validating bundles, or explaining distribution-only failures"), matching the score-3 anchor with an explicit "Use when" clause.

3 / 3

Trigger Term Quality

"archiving apps, validating bundles, distribution-only failures" are natural phrases, but common variations a user would say ("notarize", "code signing", "hardened runtime", ".app") are missing, so coverage is partial like the score-2 anchor.

2 / 3

Distinctiveness Conflict Risk

The macOS packaging/notarization niche is distinct with triggers unlikely to fire for unrelated skills, and it uses third person voice, matching the score-3 anchor.

3 / 3

Total

10

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
robinebers/openusage
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.