菜单
Package, code-sign, and notarize a desktop app for Windows (Authenticode/EV) and macOS (Developer ID + notarytool + staple), and ship a safe signed auto-update (signature verified before apply, channels, staged rollout, rollback, version floor).
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/mcorbett51090/RavenClaude --skill packaging-signing-and-updates命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Route everyday, well-defined work (single-file edits, test-writing, summarization, mechanical refactors, boilerplate) to a cheaper coding agent (Grok or Copilot CLI) instead of doing it in the main Claude session, escalating multi-file/architecture/debugging/security work to Claude. Opt-in via the `cheap_lane:` comfort-posture knob.
Authors, validates and packages a claude.ai Organization Skill — the intake questions, the trigger and scope exercises, then lint, pack and verify against measured platform constraints. Reach for this when someone wants to publish a Skill to their organization, or when an upload was rejected and the reason is unclear.
Drafts a reply to an inbound customer email, grounded in the account record and the published help-centre articles rather than in recall. Use when a customer emails about billing, a renewal or an outage, when a reply must cite current policy, or when a teammate asks for a first draft to edit.
基于 SOC 职业分类
正在显示 SKILL.md
| name | packaging-signing-and-updates |
| description | Package, code-sign, and notarize a desktop app for Windows (Authenticode/EV) and macOS (Developer ID + notarytool + staple), and ship a safe signed auto-update (signature verified before apply, channels, staged rollout, rollback, version floor). |
| OS | What | Why |
|---|---|---|
| macOS | Developer ID sign + hardened runtime, then notarytool submit + staple the ticket | Un-notarized apps are blocked by Gatekeeper |
| Windows | Authenticode sign; EV cert for instant SmartScreen trust | Standard certs accrue reputation slowly; EV is trusted immediately |
| Linux | Sign AppImage/deb/rpm per the target repo's convention | Distro trust + integrity |
Keys live in CI secrets / an HSM — never on a developer laptop.
electron-builder / Electron Forge + electron-updater; per-OS targets, ASAR.The signing/notarize/publish steps belong in the pipeline — design them here, wire them in devops-cicd.
notarytoolreplaced the deprecatedaltool; Gatekeeper/SmartScreen behavior and cert requirements shift —[verify-at-use].