signing-entitlements

Diagnoses the signing, entitlement and Gatekeeper problems that stop Mac apps from launching.

Ecosystem: Codex
Skill category: Security
Creator / organization: OpenAI

What it is

signing-entitlements is part of the build-macos-apps plugin for Codex. Mac apps need a code signature and must declare the entitlements they use, or Gatekeeper may refuse to open them. This Skill covers launch refusals, missing entitlements, invalid signatures and sandbox mismatches. It finds the actual executable inside the .app, reads signing and entitlement details with commands such as codesign and spctl, and classifies the problem: unsigned code, the wrong identity, a missing entitlement, a hardened runtime conflict, or unmet distribution requirements. It then states exactly what is wrong and gives the minimal commands to confirm the fix. It never invents entitlements and keeps local debug signing separate from notarization.

Who it's for:Mac developers facing apps that won't open or signing errors. If you don't write code, it won't be useful to you.

Before you start: you need macOS and the Xcode command-line tools. Check the repository for license terms.

Based on the project's public documentation. Not tested by AI Inspiration World.