Agent skill · software engineering · steipete
release-openclaw-mac
Run or recover OpenClaw macOS release signing, notarization, appcast, and asset promotion.
Why this skill is useful
Adds specific commands and workflows for macOS release signing and notarization that the AI wouldn't reliably generate on its own.
What it needs
Requires gh, tmux, xcode installed locally. Requires 1password account access. About 4k tokens when loaded. Last updated 2026-08-07. 385,400 stars on the source repository.
What this skill does
OpenClaw Mac Release Use with $release-openclaw-maintainer, $release-openclaw-ci, $one-password, and $release-private if it exists when stable macOS assets, release-ops mac preflight, notarization, appcast promotion, or mac release recovery is involved. This is a regular stable-release skill. Do not invoke it for extended-stable; that track's GitHub Release carries shared validation evidence but does not inherit macOS assets or appcast promotion. Release authorization An explicit stable or full release request includes macOS publication unless the operator limits its scope. Continue through validation, signing, notarization, promotion, and verification without asking for separate macOS consent. Keep the exact release identity and all artifact checks. macOS publication runs in parallel with npm and never blocks it; a mac failure does not hold the npm/ClawHub release, GitHub release finalization, or main closeout. Fix it in parallel. Follow the current owner-configured environment policy. Do not invent an extra reviewer requirement or recreate an obsolete one. If GitHub still enforces an approval, report the actual rule and resolve it through its owner; policy changes require explicit organization-owner direction and verified active admin membership. Never impersonate a reviewer, fabricate approval, or use another signing path to bypass an enforced rule. Credentials Resolve Peter-owned ASC item refs, key ids, issuer ids, and service-token provenance from $release-private. Fields: privatekeyp8, keyid, issuerid. Stale/revoked key symptom: xcrun notarytool submit fails with HTTP status code: 401. Unauthenticated. Validate candidate ASC credentials with xcrun notarytool history before setting GitHub secrets. 1Password Use $one-password: all op work inside one persistent tmux session, no secret output. Use the service-token guidance from $release-private when available. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills steipete/release-openclaw-mac