Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

[AgentKit v3][P1] Verified SkillX creator contributions and account-linked evidence events

Abierto
  • ¿Algo no está bien?
#81 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
5/5
Tiempo estimado
Más de una semana
Aptitud para principiantes
12/100
Tipo de issue
Nueva funcionalidad
Claridad
Necesita aclaración
Estado de actividad
Activo
Stack tecnológico
typescript
Área
api, authentication, backend

Línea de trabajo

This is a cross-repository policy and architecture spec, not a single change. Before any code, read apps/web/app/lib/releases/publisher-provision.ts and the release identity and registry code it depends on, and check nextlevelbuilder/skillx#54 to avoid duplicating foundation publishing. Done means maintainers agree on the account-linking, event model and webhook design, not that code ships from this issue.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

enhancement

Objective

Supply verifiable SkillX contributor/publisher events to AgentKit's Become a Contributor program for v3 launch and beyond, without turning SkillX popularity into an untrusted payout oracle.

Owner policy and approval in AgentKit ak-web: https://github.com/bestagentkits/ak-web/issues/88
Verified scoring and monthly tiers: https://github.com/bestagentkits/ak-web/issues/573
AgentKit contributor workflow: https://github.com/bestagentkits/agentkit/issues/2383
Existing AgentKit foundation publishing (avoid duplicate): https://github.com/nextlevelbuilder/skillx/issues/54

Business policy

  • Eligible paying AgentKit customers may apply as Contributors. Accepted meaningful SkillX contributions can yield verified program contribution points; external publisher accounts are not automatically approved AgentKit Contributors.
  • AgentKit Contributor commissions: 40/50/60% subject to monthly score and sales; SkillX should provide evidence, not decide Contributor tier, license rights, or payouts.
  • AgentKit v3 purchased license: perpetual use + 12 months updates; active Contributors receive ongoing updates without renewal while status remains eligible. That entitlement is administered by ak-web, not a SkillX skill publisher token.

Scope

  • Establish account linking AgentKit user ID <-> SkillX publisher immutable ID <-> GitHub immutable numeric ID via authenticated authorization, explicit consent, and unlink/revoke; do not match by display name.
  • Immutable event model for submitted/approved/published/updated/withdrawn skill/kit, accepted upstream AgentKit foundation improvement, adoption-quality signals, moderation outcomes; source event ID, canonical artifact identity, version/digest, author ID, timestamps and review status.
  • Signed webhooks (HMAC + rotating key or other reviewed authenticated delivery), replay protection, idempotency and cursor-based paginated polling/reconciliation fallback; avoid placing PII/tokens/secret source content in events.
  • Moderation gate: exclude spam/self-installs/fake ratings/duplicate forks/unapproved or security-flagged scripts. Distinguish private/unlisted skills and attribution; no trust in self-declared installs as monetizable contribution.
  • Respect SkillX publisher/release current architecture (existing apps/web/app/lib/releases/publisher-provision.ts, release identity and registry), versioned contracts, revoke/takedown/reversal signals, and GitHub source provenance.
  • Activity dashboard should show verified accepted contributions, review hold, source evidence and link to AgentKit profile; consent-based public creator credit optional.
  • Ship stable API/Event docs + representative fixtures and integrations; do not require linking AgentKit admin/revenue database to SkillX.

Acceptance

  • Verified SkillX publisher can consent-link to AgentKit account by immutable identity; unlink stops future personal attribution.
  • Accepted, updated, removed/rejected SkillX artifacts produce authenticated, deduped, replay-safe evidence events with moderation status.
  • No fake activity can automatically raise commission tier or grant unlimited update rights; ak-web remains sole decider.
  • Failed webhook delivery can be reconciled by cursor safely; late/retracted events produce reversible scoring adjustments.
  • Backward compatibility with existing SkillX publisher API and AgentKit v3 source identity/pinned foundation publishing #54; docs/tests/PII controls covered.

Priority: P1, unless first release explicitly promises automated SkillX scoring. Manual maintainer review of SkillX contribution evidence is acceptable for v3 launch.

Lenguaje dominante
TypeScript
Estrellas
189
Forks
40
Merge medio
6 h 54 min
PR fusionados (30 d)
24

Preparar el entorno

Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de nextlevelbuilder/skillx

Todos los issues de nextlevelbuilder/skillx

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.