Hacktoberfest 2026：メンテナが10月に向けて印を付けた、オープンで初心者向けの issue。 Hacktoberfest の issue を見る

[AgentKit v3][P1] Verified SkillX creator contributions and account-linked evidence events

オープン
  • 何か問題がありますか？
#81 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る

メンテナーはふだん 1 日以内に返信

まだ誰も着手していません。

評価

難易度
5/5
見積もり時間
1週間以上
初心者へのやさしさ
12/100
issue の種類
機能追加
明瞭さ
説明が足りない
活発さ
活発
技術スタック
typescript
領域
api, authentication, backend

調査の方向性

This is a cross-repository policy and architecture spec, not a single change. Before any code, read apps/web/app/lib/releases/publisher-provision.ts and the release identity and registry code it depends on, and check nextlevelbuilder/skillx#54 to avoid duplicating foundation publishing. Done means maintainers agree on the account-linking, event model and webhook design, not that code ships from this issue.

索引モデルが issue の本文から書いたものです。

説明

enhancement

Objective

Supply verifiable SkillX contributor/publisher events to AgentKit's Become a Contributor program for v3 launch and beyond, without turning SkillX popularity into an untrusted payout oracle.

Owner policy and approval in AgentKit ak-web: https://github.com/bestagentkits/ak-web/issues/88
Verified scoring and monthly tiers: https://github.com/bestagentkits/ak-web/issues/573
AgentKit contributor workflow: https://github.com/bestagentkits/agentkit/issues/2383
Existing AgentKit foundation publishing (avoid duplicate): https://github.com/nextlevelbuilder/skillx/issues/54

Business policy

  • Eligible paying AgentKit customers may apply as Contributors. Accepted meaningful SkillX contributions can yield verified program contribution points; external publisher accounts are not automatically approved AgentKit Contributors.
  • AgentKit Contributor commissions: 40/50/60% subject to monthly score and sales; SkillX should provide evidence, not decide Contributor tier, license rights, or payouts.
  • AgentKit v3 purchased license: perpetual use + 12 months updates; active Contributors receive ongoing updates without renewal while status remains eligible. That entitlement is administered by ak-web, not a SkillX skill publisher token.

Scope

  • Establish account linking AgentKit user ID <-> SkillX publisher immutable ID <-> GitHub immutable numeric ID via authenticated authorization, explicit consent, and unlink/revoke; do not match by display name.
  • Immutable event model for submitted/approved/published/updated/withdrawn skill/kit, accepted upstream AgentKit foundation improvement, adoption-quality signals, moderation outcomes; source event ID, canonical artifact identity, version/digest, author ID, timestamps and review status.
  • Signed webhooks (HMAC + rotating key or other reviewed authenticated delivery), replay protection, idempotency and cursor-based paginated polling/reconciliation fallback; avoid placing PII/tokens/secret source content in events.
  • Moderation gate: exclude spam/self-installs/fake ratings/duplicate forks/unapproved or security-flagged scripts. Distinguish private/unlisted skills and attribution; no trust in self-declared installs as monetizable contribution.
  • Respect SkillX publisher/release current architecture (existing apps/web/app/lib/releases/publisher-provision.ts, release identity and registry), versioned contracts, revoke/takedown/reversal signals, and GitHub source provenance.
  • Activity dashboard should show verified accepted contributions, review hold, source evidence and link to AgentKit profile; consent-based public creator credit optional.
  • Ship stable API/Event docs + representative fixtures and integrations; do not require linking AgentKit admin/revenue database to SkillX.

Acceptance

  • Verified SkillX publisher can consent-link to AgentKit account by immutable identity; unlink stops future personal attribution.
  • Accepted, updated, removed/rejected SkillX artifacts produce authenticated, deduped, replay-safe evidence events with moderation status.
  • No fake activity can automatically raise commission tier or grant unlimited update rights; ak-web remains sole decider.
  • Failed webhook delivery can be reconciled by cursor safely; late/retracted events produce reversible scoring adjustments.
  • Backward compatibility with existing SkillX publisher API and AgentKit v3 source identity/pinned foundation publishing #54; docs/tests/PII controls covered.

Priority: P1, unless first release explicitly promises automated SkillX scoring. Manual maintainer review of SkillX contribution evidence is acceptable for v3 launch.

主要言語
TypeScript
スター
189
フォーク
40
平均マージ
7時間 38分
マージ済み PR（30日）
30

環境構築

このプロジェクトには開発コンテナ、Dockerfile、コントリビューションガイドがありません。まず README を読み、一般的な手順ははじめてのコントリビューションガイドを参照してください。

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

nextlevelbuilder/skillx のほかの issue

nextlevelbuilder/skillx の issue をすべて見る

似ている issue

TypeScript の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。