macos-security

Verify macOS app notarization, Hardened Runtime, Sandbox, and code signing compliance.

Updated Dec 22, 2025

Search Tags:#macOS #sandbox #security-review #codesign #notarization #notarytool #hardened-runtime

Ready to run

npx skills add https://github.com/miyakawa2449/KiroBookmark --skill macos-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: macos-security
Source: https://github.com/miyakawa2449/KiroBookmark/tree/main/.claude/skills/macos-security
Command: npx skills add https://github.com/miyakawa2449/KiroBookmark --skill macos-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security reviewers verify macOS app readiness by checking notarization, Hardened Runtime, Sandbox, and codesigning in distributed applications.

Core Features & Use Cases

Notarization verification: Ensure the app is properly notarized and eligible for distribution.
Runtime and Sandbox checks: Verify Hardened Runtime activation and minimal entitlements with App Sandbox enabled.
Codesign validation: Check that code signing is valid and notary status is current for the release.

Quick Start

Use this skill to review a macOS app's notarization and sandbox compliance for a new release.

Frequently Asked Questions about macos-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I verify macOS app notarization and sandbox compliance for a release?▼

macOS app security review checks notarization status, Hardened Runtime activation, App Sandbox enablement, and code signing validity. It ensures distributed apps meet macOS security requirements before release.

What is Hardened Runtime and why do I need it for macOS app distribution?▼

Hardened Runtime is a macOS security mechanism that must be activated for distributed apps. It works alongside App Sandbox and proper entitlements to enforce runtime protections, ensuring apps meet notarization eligibility and security review standards.

How do I check if my macOS app has proper codesign and notary status?▼

To check codesign and notary status, verify that code signing is valid and the notarization status is current using notarytool. This security review confirms the app is properly signed and eligible for macOS distribution.

Does my macOS app need App Sandbox enabled to pass a security review?▼

Yes, App Sandbox must be enabled to pass a macOS security review. The review verifies sandbox usage alongside minimal entitlements and Hardened Runtime activation to ensure the distributed app meets security compliance standards.

When do I need to perform a macOS security review with notarytool?▼

You need to perform a macOS security review with notarytool during macOS app releases, notarization requests, and security reviews for distributed apps. It verifies notarization status, code signing, Hardened Runtime, and sandbox compliance.

What entitlements should I verify during a macOS app security review?▼

During a macOS app security review, you should verify that appropriate minimal entitlements are configured. These entitlements must be checked alongside Hardened Runtime activation and App Sandbox usage to ensure proper security compliance.