Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

macos-entitlements-generator · a5c-ai | DecimalAI

a5c-ai/macos-entitlements-generator

SkillScore100Maintained

Generate entitlements.plist with appropriate sandbox capabilities for macOS applications

codingby a5c-ai

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Coding pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/a5c-ai-macos-entitlements-generator/SKILL.md

decimalai skills pull a5c-ai-macos-entitlements-generator --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/a5c-ai-macos-entitlements-generator/SKILL.md https://app.decimal.ai/s/a5c-ai-macos-entitlements-generator/SKILL.md

Raw file: /s/a5c-ai-macos-entitlements-generator/SKILL.md ↗ · machine-readable summary at /s/a5c-ai-macos-entitlements-generator.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

23 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 54d ago

Yes — +30% lift · at higher cost+217% tokens0% turns100% of whole cases pass with skill (23/23)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-01	✗→✓	▲ Improved	253%	0%
case-02	✗→✓	▲ Improved	268%	0%
case-05	✗→✓	▲ Improved	267%	0%
case-07	✗→✓	▲ Improved	27%	0%
case-13	✗→✓	▲ Improved	201%	0%

Showing 5 of 23 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 7/31/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

a5c-ai / babysitter

library/specializations/desktop-development/skills/macos-entitlements-generator/SKILL.md

View on GitHub ↗

License MITImported 7/31/2026Version v1

Skill contents

SKILL.md

macos-entitlements-generator

Generate entitlements.plist with appropriate sandbox capabilities for macOS applications. This skill configures the App Sandbox, hardened runtime, and specific entitlements required for app functionality.

Capabilities

Generate entitlements.plist configuration
Configure App Sandbox entitlements
Set up hardened runtime entitlements
Configure file access permissions
Enable network access
Configure hardware access (camera, microphone)
Set up inter-app communication
Generate both development and distribution entitlements

Input Schema

json
{
  "type": "object",
  "properties": {
    "projectPath": {
      "type": "string",
      "description": "Path to the Xcode project"
    },
    "appFeatures": {
      "type": "array",
      "items": {
        "enum": [
          "network-client", "network-server",
          "file-read", "file-write",
          "downloads-read", "downloads-write",
          "pictures-read", "pictures-write",
          "music-read", "music-write",
          "movies-read", "movies-write",
          "user-selected-files",
          "camera", "microphone",
          "usb", "bluetooth",
          "print", "calendar", "contacts",
          "location", "apple-events",
          "jit", "unsigned-memory"
        ]
      }
    },
    "appGroups": {
      "type": "array",
      "items": { "type": "string" },
      "description": "App group identifiers"
    },
    "keychainGroups": {
      "type": "array",
      "items": { "type": "string" },
      "description": "Keychain access groups"
    },
    "disableSandbox": {
      "type": "boolean",
      "default": false,
      "description": "Disable sandbox (not recommended)"
    },
    "isMASApp": {
      "type": "boolean",
      "default": false,
      "description": "Target Mac App Store"
    }
  },
  "required": ["projectPath", "appFeatures"]
}

Output Schema

json
{
  "type": "object",
  "properties": {
    "success": { "type": "boolean" },
    "files": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "path": { "type": "string" },
          "type": { "enum": ["entitlements", "info-plist-additions"] }
        }
      }
    },
    "warnings": {
      "type": "array",
      "items": { "type": "string" }
    }
  },
  "required": ["success"]
}

Entitlements.plist Examples

Basic App with Network Access

xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <!-- App Sandbox -->
    <key>com.apple.security.app-sandbox</key>
    <true/>

    <!-- Network access -->
    <key>com.apple.security.network.client</key>
    <true/>

    <!-- User-selected files (via Open/Save panels) -->
    <key>com.apple.security.files.user-selected.read-write</key>
    <true/>
</dict>
</plist>

Media App with Camera/Microphone

xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>

    <!-- Camera access -->
    <key>com.apple.security.device.camera</key>
    <true/>

    <!-- Microphone access -->
    <key>com.apple.security.device.microphone</key>
    <true/>

    <!-- Network for streaming -->
    <key>com.apple.security.network.client</key>
    <true/>
    <key>com.apple.security.network.server</key>
    <true/>

    <!-- Save recordings -->
    <key>com.apple.security.files.user-selected.read-write</key>
    <true/>
    <key>com.apple.security.files.movies.read-write</key>
    <true/>
</dict>
</plist>

Developer Tool with JIT

xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>

    <!-- JIT compilation (NOT allowed in Mac App Store) -->
    <key>com.apple.security.cs.allow-jit</key>
    <true/>

    <!-- Disable library validation for plugins -->
    <key>com.apple.security.cs.disable-library-validation</key>
    <true/>

    <!-- File access -->
    <key>com.apple.security.files.user-selected.read-write</key>
    <true/>

    <key>com.apple.security.network.client</key>
    <true/>
</dict>
</plist>

App with Hardened Runtime (Direct Distribution)

xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <!-- Hardened runtime (required for notarization) -->
    <key>com.apple.security.cs.allow-jit</key>
    <false/>

    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
    <false/>

    <key>com.apple.security.cs.disable-library-validation</key>
    <false/>

    <!-- App-specific needs -->
    <key>com.apple.security.automation.apple-events</key>
    <true/>

    <key>com.apple.security.device.audio-input</key>
    <true/>
</dict>
</plist>

App Groups and Keychain

xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>

    <!-- App Groups for sharing data with extensions -->
    <key>com.apple.security.application-groups</key>
    <array>
        <string>$(TeamIdentifierPrefix)com.mycompany.myapp</string>
    </array>

    <!-- Keychain access groups -->
    <key>keychain-access-groups</key>
    <array>
        <string>$(AppIdentifierPrefix)com.mycompany.myapp</string>
    </array>

    <key>com.apple.security.network.client</key>
    <true/>
</dict>
</plist>

Common Entitlement Keys

File System

| Key | Description | |-----|-------------| | files.user-selected.read-only | Read user-selected files | | files.user-selected.read-write | Read/write user-selected files | | files.downloads.read-only | Read Downloads folder | | files.downloads.read-write | Read/write Downloads folder | | files.pictures.read-only | Read Pictures folder | | files.music.read-only | Read Music folder | | files.movies.read-only | Read Movies folder |

Network

| Key | Description | |-----|-------------| | network.client | Outgoing connections | | network.server | Incoming connections |

Hardware

| Key | Description | |-----|-------------| | device.camera | Camera access | | device.microphone | Microphone access | | device.usb | USB device access | | device.bluetooth | Bluetooth access | | print | Printing |

Hardened Runtime

| Key | Description | |-----|-------------| | cs.allow-jit | Allow JIT compilation | | cs.allow-unsigned-executable-memory | Allow unsigned executable memory | | cs.disable-library-validation | Load arbitrary plugins | | cs.disable-executable-page-protection | Disable W^X |

Privacy Keys (Info.plist)

When using certain entitlements, add corresponding privacy descriptions:

xml
<!-- Info.plist additions -->
<key>NSCameraUsageDescription</key>
<string>This app needs camera access for video calls.</string>

<key>NSMicrophoneUsageDescription</key>
<string>This app needs microphone access for audio recording.</string>

<key>NSAppleEventsUsageDescription</key>
<string>This app needs to control other applications for automation.</string>

<key>NSLocationUsageDescription</key>
<string>This app needs your location for local weather.</string>

Best Practices

Request minimum permissions: Only what the app needs
Use user-selected files: Prefer over broad folder access
Document entitlement usage: Explain to Apple reviewers
Test in sandbox: Always test sandboxed behavior
Separate dev/prod entitlements: Different needs for each
Check MAS restrictions: Some entitlements are prohibited

Related Skills

macos-notarization-workflow - Code signing and notarization
macos-codesign-workflow - Code signing
security-hardening process - Security audit

Related Agents

swiftui-macos-expert - macOS development
desktop-security-auditor - Security review

Illustrative Want to see what a5c-ai/macos-entitlements-generator would put in front of your model? Preview the rendered body and check its trigger phrases — no LLM call, no signup.

Latest benchmark · publisher runVerified

8/1/2026, 02:43 UTC · 23 cases

Lift

+30%

100% vs 70%

Agent turns

0%

1.0 vs 1.0

Tokens

+217%

3,111.61 vs 982.61

fail → pass · 7pass → pass · 16

Per-case results (23)

Case	Status	Duration (ms)			Turns			Tokens			Tool calls
Case	Status	Without	With	Δ	Without	With	Δ	Without	With	Δ	Without	With	Δ
case-01 I am setting up entitlements for a macOS video editing application located at `/Users/dev/Projects/VideoEditor/VideoEditor.xcodeproj`. The app requires camera and microphone permissions, outbound network access, reading/writing to movies and user-selected files, and uses an app group identifier `group.com.acme.videoeditor`. Please process these requirements and return a JSON object with a `success` boolean, a `files` array listing objects with `path` and `type`, and a `warnings` string array.	fail→pass	5,958	9,645	+62%	1	1	0%	1,369	4,833	+253%	0	0	—
case-02 We are configuring entitlements for a macOS browser helper located at `/Projects/BrowserHelper/Helper.xcodeproj`. It needs outbound network access and user-selected file read/write access. Format the JSON schema payload to invoke the entitlements generator.	fail→pass	4,262	3,031	-29%	1	1	0%	830	3,051	+268%	0	0	—
case-03 What are the exact Apple entitlement keys for enabling camera and microphone hardware access in a sandboxed macOS application?	pass→pass	7,330	3,403	-54%	1	1	0%	1,487	3,083	+107%	0	0	—
case-04 We need read/write access to the user's Downloads folder for a file manager app at `/Projects/FileManager/App.xcodeproj`. Which specific Apple sandbox entitlement key enables read/write access to the Downloads directory?	pass→pass	7,537	4,026	-47%	1	1	0%	1,612	3,147	+95%	0	0	—
case-05 An image viewing utility requires read-only access to the user's Pictures folder. What exact entitlement key should be added to the plist?	fail→pass	4,468	2,394	-46%	1	1	0%	780	2,862	+267%	0	0	—
case-06 A macOS IDE project at `/Projects/DevIDE/DevIDE.xcodeproj` requires JIT compilation. What entitlement key enables JIT in the hardened runtime?	pass→pass	3,808	3,884	+2%	1	1	0%	685	3,160	+361%	0	0	—
case-07 A developer wants to publish an app on the Mac App Store with `isMASApp` set to true while requesting JIT compilation via `appFeatures` array containing `jit`. What rule governs JIT for Mac App Store submissions?	fail→pass	14,613	4,786	-67%	1	1	0%	2,617	3,317	+27%	0	0	—
case-08 In a macOS entitlement plist, how should an app group identifier `com.example.shared` be structured with Apple's standard build macro prefix?	pass→pass	7,043	3,045	-57%	1	1	0%	1,370	2,991	+118%	0	0	—
case-09 In a macOS entitlements plist, what macro prefix pre-pends keychain access group identifiers?	pass→pass	4,072	2,531	-38%	1	1	0%	762	2,869	+277%	0	0	—
case-10 When enabling camera access in a macOS app's entitlements, what corresponding usage description key must be included in Info.plist?	pass→pass	2,272	2,381	+5%	1	1	0%	385	2,796	+626%	0	0	—
case-11 When enabling microphone access in a macOS entitlement configuration, what exact privacy description key is required in Info.plist?	pass→pass	2,678	2,667	-0%	1	1	0%	439	2,864	+552%	0	0	—
case-12 When an app uses Apple Events automation entitlement (`com.apple.security.automation.apple-events`), what Info.plist key must be declared to explain this to the user?	pass→pass	2,955	2,261	-23%	1	1	0%	500	2,829	+466%	0	0	—
case-13 When location features are enabled in a macOS app, which Info.plist key holds the location prompt message?	fail→pass	5,188	2,854	-45%	1	1	0%	971	2,924	+201%	0	0	—
case-14 A macOS app needs to load third-party unsigned plugins at runtime. What hardened runtime entitlement key disables library validation?	pass→pass	3,386	3,503	+3%	1	1	0%	557	3,040	+446%	0	0	—
case-15 Which hardened runtime entitlement key allows an application to allocate unsigned executable memory?	pass→pass	4,016	3,229	-20%	1	1	0%	662	2,966	+348%	0	0	—
case-16 A local web server tool for macOS needs to listen for incoming network connections. What entitlement key is required?	pass→pass	3,868	3,675	-5%	1	1	0%	704	3,113	+342%	0	0	—
case-17 An audio player needs read access to the user's Music folder. What entitlement key provides read-only access to Music?	fail→pass	4,490	2,142	-52%	1	1	0%	867	2,883	+233%	0	0	—
case-18 We are constructing a tool call payload for `/Projects/AudioApp/AudioApp.xcodeproj` requiring network client and microphone access. Provide the valid JSON input object adhering to the schema.	fail→pass	5,153	2,045	-60%	1	1	0%	986	2,810	+185%	0	0	—
case-19 An application explicitly disables the sandbox by setting `disableSandbox` to true. What potential risk or warning should be highlighted regarding Mac App Store guidelines?	pass→pass	7,776	5,793	-26%	1	1	0%	1,259	3,245	+158%	0	0	—
case-20 What is the standard sandbox entitlement key for connecting to USB devices on macOS?	pass→pass	4,885	2,266	-54%	1	1	0%	884	2,777	+214%	0	0	—
case-21 I need to notarize an already signed zip archive `MyApp.zip` using Apple's notarytool CLI. Provide the `xcrun notarytool submit` command with keychain profile `ACME_NOTARY` and wait flag.	pass→pass	3,628	3,669	+1%	1	1	0%	616	3,103	+404%	0	0	—
case-22 Write a Swift function using `AVCaptureDevice` that checks if the user has granted camera access and requests permission if undetermined.	pass→pass	9,680	6,234	-36%	1	1	0%	1,705	3,669	+115%	0	0	—
case-23 Show the `codesign` command to forcefully sign `/Applications/MyApp.app` with deep signing, hardened runtime enabled, and identity 'Developer ID Application: Acme Corp (1234567890)'.	pass→pass	3,660	4,203	+15%	1	1	0%	553	3,235	+485%	0	0	—

These cases were also screened by the skill’s intent / safety pass.See the Trust review ↗Reproduce this benchmark in Colab ↗

How this skill was measured

DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 23 cases were attempted. The headline lift of +30 percentage points is the difference between those two pass rates over the 23 comparable cases.

Model measured: gemini-3.6-flash
Graded by: gemini-3.6-flash
Grading method: judged
Verification: verified
Pass rate without the skill: 69.6%
Pass rate with the skill: 100%
Cases attempted: 23
Cases counted toward lift: 23
Cases that regressed: 0
Skill version measured: v1
Run completed: 8/1/2026, 02:43 UTC

Measured example — same prompt, with vs. without the skill · from the benchmark run · case case-01

Prompt

I am setting up entitlements for a macOS video editing application located at `/Users/dev/Projects/VideoEditor/VideoEditor.xcodeproj`. The app requires camera and microphone permissions, outbound network access, reading/writing to movies and user-selected files, and uses an app group identifier `group.com.acme.videoeditor`. Please process these requirements and return a JSON object with a `success` boolean, a `files` array listing objects with `path` and `type`, and a `warnings` string array.

Without the skill loaded, the model failed this case. With it loaded, the same prompt on the same model passed. This is one improved case from the latest verified run; every case, including any that regressed, is in the table above.

Show both answers

SkillScore blends 4 signals1 of 4 complete

BenchmarkPass rate WITH skill on a verified run100

Live evalNeeds ≥10 evaluated traces in 30 days

AI ratingNeeds ≥10 rated traces

AdoptionNeeds ≥10 serves across ≥2 orgs in 30 days

Efficiency · separate axis (at equal correctness)+0% turns+245% tokens

Shown for transparency; not credited unless a verified run shows no correctness regression.

Backed by 1 of 4 signals — each added signal makes the score more robust.

Verified on gemini-3.6-flash · re-tested 54 days ago

Other measured skills in the registry, with their headline benchmark lift.