unsigned-desktop-release-playbook

Installation
SKILL.md

Unsigned Desktop Release Playbook

Overview

Use this skill when you must distribute desktop binaries without code-signing certificates, while keeping packaging integrity verifiable and onboarding steps beginner-friendly.

When to Use

  • macOS and/or Windows desktop release is required, but signing credentials are unavailable.
  • Users report macOS "app is damaged" or cannot find "Open Anyway".
  • You need a repeatable GitHub release checklist for unsigned binaries.

Core Principle

  • Differentiate corrupted package vs unsigned package:
    • Corrupted package: codesign --verify --deep --strict fails. Must be fixed in build pipeline.
    • Unsigned package: codesign --verify can pass, but spctl --assess rejects. This is expected without certificate/notarization.

Packaging Validation Workflow

  1. Download release asset from GitHub.
  2. Mount DMG and check app integrity:
    • codesign --verify --deep --strict --verbose=2 "<App>.app"
Related skills
Installs
1
Repository
peiiii/nextclaw
GitHub Stars
208
First Seen
Apr 6, 2026