CtrlK
BlogDocsLog inGet started
Tessl Logo

packaging-notarization

Prepare and troubleshoot packaging, signing, and notarization workflows for macOS distribution. Use when asked to archive a Mac app, validate bundle structure, reason about notarization readiness, or explain distribution-only failures.

72

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is packaging-notarization in openai/plugins

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A compact, well-structured instruction skill that is lean and clearly organized. Its main weakness is actionability: it names what to inspect and even alludes to validation commands, but does not provide the executable commands themselves or an explicit retry loop.

Suggestions

Add the concrete validation commands the workflow alludes to (e.g. `codesign --verify --deep --strict --verbose=2 <app>`, `spctl --assess --verbose=4 <app>`, `xcrun notarytool submit`/`xcrun stapler staple`) so step 4's 'minimum follow-up validation commands' are executable rather than just referenced.

Insert an explicit validate->fix->retry feedback loop in the workflow, e.g. if `codesign --verify` reports a nested-framework signature error, fix the nested signature and re-run before assessing notarization readiness.

Make the 'Inspect the artifact' step actionable by pairing each checklist item with the command that inspects it (e.g. bundle structure via `ls -R`, nested frameworks via `find <app> -name '*.framework'`, entitlements via `codesign -d --entitlements :-`).

DimensionReasoningScore

Conciseness

Lean checklist-style body with no concept-explanation padding (it never explains what notarization or hardened runtime is) and every section earning its place; it assumes Claude's competence throughout.

5 / 5

Actionability

Gives concrete inspection targets (bundle structure, nested frameworks, entitlements, hardened runtime, signing identity) and decision logic, but references 'the minimum follow-up validation commands' without listing the actual codesign/spctl/notarytool commands, leaving a minor executability gap.

4 / 5

Workflow Clarity

A clear four-step sequence with inspection checkpoints and an Output Expectations checklist, but it lacks an explicit validate->fix->retry feedback loop and embeds no validation commands, stopping short of anchor 5.

4 / 5

Progressive Disclosure

Under 50 lines, single-purpose, with no need for external references, and organized into well-signaled sections (Quick Start, Workflow, Guardrails, Output Expectations), which the simple-skill exception rewards with a 5.

5 / 5

Total

18

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-targeted description that explicitly covers what the skill does and when to use it with concrete, domain-specific triggers. The only gap is synonym/extension coverage in the trigger terms.

DimensionReasoningScore

Specificity

Names multiple concrete actions across the full domain — 'Prepare and troubleshoot packaging, signing, and notarization workflows' plus 'archive a Mac app, validate bundle structure, reason about notarization readiness, or explain distribution-only failures' — giving comprehensive coverage rather than minor gaps.

5 / 5

Completeness

Explicitly states both what ('Prepare and troubleshoot packaging, signing, and notarization workflows for macOS distribution') and when ('Use when asked to archive a Mac app, validate bundle structure, reason about notarization readiness, or explain distribution-only failures') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Includes natural phrases a user would say ('archive a Mac app', 'notarization readiness', 'distribution-only failures'), but omits common synonyms and the .app extension (e.g. 'notarize', 'codesign', 'App Store'), so coverage is good rather than comprehensive.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear macOS-distribution niche with distinctive triggers ('notarization readiness', 'distribution-only failures', 'archive a Mac app') that are unlikely to fire for unrelated skills, so conflict risk is minimal.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
robinebers/openusage
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.