Agent Skills › robinebers/openusage › packaging-notarization

packaging-notarization

GitHub

用于 macOS 应用的打包、签名及公证流程准备与故障排查。适用于归档验证、分发包结构检查、 hardened runtime 配置及公证失败原因分析，确保应用符合发布标准。

.agents/skills/packaging-notarization/SKILL.md robinebers/openusage

Trigger Scenarios

macOS 应用归档代码签名与公证故障排查分发包结构验证

Install

npx skills add robinebers/openusage --skill packaging-notarization -g -y

More Options

Non-standard path

npx skills add https://github.com/robinebers/openusage/tree/main/.agents/skills/packaging-notarization -g -y

Use without installing

npx skills use robinebers/openusage@packaging-notarization

指定 Agent (Claude Code)

npx skills add robinebers/openusage --skill packaging-notarization -a claude-code -g -y

安装 repo 全部 skill

npx skills add robinebers/openusage --all -g -y

预览 repo 内 skill

npx skills add robinebers/openusage --list

SKILL.md

Frontmatter

{
    "name": "packaging-notarization",
    "description": "Prepare and troubleshoot packaging, signing, and notarization workflows for macOS distribution. Use when asked to archive a Mac app, validate bundle structure, reason about notarization readiness, or explain distribution-only failures."
}

Packaging & Notarization

Quick Start

Use this skill when the work is about shipping the app rather than merely running it locally: archives, exported app bundles, notarization readiness, hardened runtime, or distribution validation.

Workflow

Confirm the distribution goal.
- Local archive validation
- Signed distributable app
- Notarization troubleshooting
Inspect the artifact.
- Validate app bundle structure.
- Check nested frameworks, helper tools, and entitlements.
Inspect signing and runtime prerequisites.
- Hardened runtime
- Signing identity
- Nested code signatures
- Required entitlements
Explain notarization readiness or failure.
- Separate packaging issues from trust-policy symptoms.
- Point to the minimum follow-up validation commands.

Guardrails

Do not present notarization as required for ordinary local debug runs.
Call out when you lack the actual exported artifact and are inferring from project settings.
Keep advice concrete and verifiable.