Macos Notarization
macOS 應用公證指南。當用戶需要打包 macOS 應用、進行公證（notarization）、或建立 DMG 時使用此 skill。包含 API 金鑰資訊和完整的公證流程。
Install
$ agentstack add skill-iml1s-flutter-claude-skills-macos-notarization ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-iml1s-flutter-claude-skills-macos-notarization) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
macOS 應用公證指南
公證憑證資訊
Your Project
| 項目 | 值 | |------|-----| | 帳號名稱 | ` | | **Issuer ID** | | | **Key ID** | | | **私鑰位置** | ~/.appstoreconnect/privatekeys/AuthKey.p8 | | **鑰匙圈憑證名稱** | | | **Team ID** | | | **Bundle ID** | com.example.yourapp` |
> 在 App Store Connect → Users and Access → Keys 創建 ASC API key 拿到 Issuer/Key ID 和下載 .p8 私鑰。
完整公證流程
1. 打包 Release 版本
cd /path/to/your/macos/app
# 清理並打包
fvm flutter clean && fvm flutter pub get
fvm flutter build macos --release --dart-define=environment=103輸出位置：build/macos/Build/Products/Release/.app
2. 建立 DMG
方法一：使用 flutter_distributor
fvm dart pub global run flutter_distributor:flutter_distributor release \
--name prod --jobs macos-dmg-release方法二：手動建立
create-dmg --volname "" \
--icon-size 140 \
--icon ".app" 162 269 \
--app-drop-link 640 269 \
".dmg" \
"build/macos/Build/Products/Release/.app"3. 提交公證
xcrun notarytool submit .dmg \
--keychain-profile "YOUR_PROFILE_NAME" \
--wait4. 裝訂票據 (Staple)
xcrun stapler staple .dmg5. 驗證
xcrun stapler validate .dmg
spctl -a -t open --context context:primary-signature -v .dmg常用指令
查看公證歷史
xcrun notarytool history --keychain-profile "YOUR_PROFILE_NAME"查看公證詳情（如果失敗）
xcrun notarytool log --keychain-profile "YOUR_PROFILE_NAME"重新儲存憑證（如果遺失）
xcrun notarytool store-credentials "YOUR_PROFILE_NAME" \
--key ~/.appstoreconnect/private_keys/AuthKey_.p8 \
--key-id "" \
--issuer ""注意事項
- .p8 私鑰只能下載一次，請妥善保管
~/.appstoreconnect/private_keys/目錄 - Hardened Runtime 必須啟用（專案已配置）
- 簽名身份必須是
Developer ID Application - DMG 和 .app 都可以單獨公證，但通常公證 DMG 即可
Related skills
release-preflight→release-app— use macos-notarization as part of the macOS-specific release workflow. Handle notarization after preflight and before release-app submits.apple-appstore-manager— manage App Store metadata after notarization completes.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ImL1s
- Source: ImL1s/flutter-claude-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.