What problem does it solve? Publishing a .NET library or PackAsTool global tool to nuget.org involves fragile CI wiring: OIDC trusted publishing policies, multi-RID pack matrices, version bumps spread across four files, and post-publish indexing lag that produces false install failures. This Skill encodes verified workflow skeletons and pitfalls so the publish pipeline works on the first dispatch. ## Core Features & Use Cases - Trusted Publishing setup: Configures GitHub Actions with OIDC (NuGet/login) instead of API keys, matching the nuget.org policy on workflow file name and environment, with manual approval via a required-reviewers environment on the push job only. - Multi-RID PackAsTool publishing: Builds before pack, pushes both the tool shell and per-RID payload packages, and uses --skip-duplicate to handle the shared shell across matrix jobs. - Version bump discipline: RED-first contract test update, then csproj (PackageVersion, InformationalVersion, AssemblyVersion), .mcp/server.json, and the fresh-install script pin. - Use Case: When asked to "add a publish workflow" to a .NET repo, generate build.yml, publish.yml, and nightly.yml, fix csproj pack metadata (license, tags, authors, repository URLs), and gate the release on a local fresh-install rehearsal before dispatch. ## Quick Start Set up a trusted-publishing GitHub Actions workflow to publish my .NET tool to nuget.org with manual approval and multi-RID packing.