[AgentKit v3][P1] Verified SkillX creator contributions and account-linked evidence events
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 12/100
- Issue 类型
- 功能
- 描述清晰度
- 需要澄清
- 活跃度
- 活跃
- 技术栈
- typescript
- 领域
- api, authentication, backend
调研方向
This is a cross-repository policy and architecture spec, not a single change. Before any code, read apps/web/app/lib/releases/publisher-provision.ts and the release identity and registry code it depends on, and check nextlevelbuilder/skillx#54 to avoid duplicating foundation publishing. Done means maintainers agree on the account-linking, event model and webhook design, not that code ships from this issue.
由索引模型根据 Issue 内容生成。
描述
Objective
Supply verifiable SkillX contributor/publisher events to AgentKit's Become a Contributor program for v3 launch and beyond, without turning SkillX popularity into an untrusted payout oracle.
Owner policy and approval in AgentKit ak-web: https://github.com/bestagentkits/ak-web/issues/88
Verified scoring and monthly tiers: https://github.com/bestagentkits/ak-web/issues/573
AgentKit contributor workflow: https://github.com/bestagentkits/agentkit/issues/2383
Existing AgentKit foundation publishing (avoid duplicate): https://github.com/nextlevelbuilder/skillx/issues/54
Business policy
- Eligible paying AgentKit customers may apply as Contributors. Accepted meaningful SkillX contributions can yield verified program contribution points; external publisher accounts are not automatically approved AgentKit Contributors.
- AgentKit Contributor commissions: 40/50/60% subject to monthly score and sales; SkillX should provide evidence, not decide Contributor tier, license rights, or payouts.
- AgentKit v3 purchased license: perpetual use + 12 months updates; active Contributors receive ongoing updates without renewal while status remains eligible. That entitlement is administered by
ak-web, not a SkillX skill publisher token.
Scope
- Establish account linking
AgentKit user ID <-> SkillX publisher immutable ID <-> GitHub immutable numeric IDvia authenticated authorization, explicit consent, and unlink/revoke; do not match by display name. - Immutable event model for submitted/approved/published/updated/withdrawn skill/kit, accepted upstream AgentKit foundation improvement, adoption-quality signals, moderation outcomes; source event ID, canonical artifact identity, version/digest, author ID, timestamps and review status.
- Signed webhooks (HMAC + rotating key or other reviewed authenticated delivery), replay protection, idempotency and cursor-based paginated polling/reconciliation fallback; avoid placing PII/tokens/secret source content in events.
- Moderation gate: exclude spam/self-installs/fake ratings/duplicate forks/unapproved or security-flagged scripts. Distinguish private/unlisted skills and attribution; no trust in self-declared installs as monetizable contribution.
- Respect SkillX publisher/release current architecture (existing
apps/web/app/lib/releases/publisher-provision.ts, release identity and registry), versioned contracts, revoke/takedown/reversal signals, and GitHub source provenance. - Activity dashboard should show verified accepted contributions, review hold, source evidence and link to AgentKit profile; consent-based public creator credit optional.
- Ship stable API/Event docs + representative fixtures and integrations; do not require linking AgentKit admin/revenue database to SkillX.
Acceptance
- Verified SkillX publisher can consent-link to AgentKit account by immutable identity; unlink stops future personal attribution.
- Accepted, updated, removed/rejected SkillX artifacts produce authenticated, deduped, replay-safe evidence events with moderation status.
- No fake activity can automatically raise commission tier or grant unlimited update rights;
ak-webremains sole decider. - Failed webhook delivery can be reconciled by cursor safely; late/retracted events produce reversible scoring adjustments.
- Backward compatibility with existing SkillX publisher API and AgentKit v3 source identity/pinned foundation publishing #54; docs/tests/PII controls covered.
Priority: P1, unless first release explicitly promises automated SkillX scoring. Manual maintainer review of SkillX contribution evidence is acceptable for v3 launch.
- 主要语言
- TypeScript
- 星标
- 190
- 派生
- 42
- 平均合并
- 3 小时 33 分钟
- 30 天内合并 PR
- 48
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
nextlevelbuilder/skillx 的其他 Issue
-
ai-handle
难度 2/5 1-3 小时 新手友好度 83/100
nextlevelbuilder/skillx#105 ·
维护者通常 1 天内回复
-
bug
难度 2/5 1-3 小时 新手友好度 76/100
nextlevelbuilder/skillx#28 ·
维护者通常 1 天内回复
-
refactor
难度 2/5 1-3 小时 新手友好度 82/100
nextlevelbuilder/skillx#27 ·
维护者通常 1 天内回复
-
feat(compatibility): write declared compatibility_json on publish, sync and backfill可能已有人在做 @mrgoonie 于 4 天前认领。 未关闭
nextlevelbuilder/skillx#119 · 已指派 1 人 ·
维护者通常 1 天内回复
-
ai-handle
难度 3/5 1-2 天 新手友好度 72/100
nextlevelbuilder/skillx#113 ·
维护者通常 1 天内回复
查看 nextlevelbuilder/skillx 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 79/100
-
难度 2/5 1-3 小时 新手友好度 79/100
galaxyproject/loom#616 ·
维护者通常 1 天内回复
-
e2e-failure ready-to-code
难度 2/5 1-3 小时 新手友好度 79/100
redhat-developer/rhdh-plugin-export-overlays#4580 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 1/5 1-3 小时 新手友好度 84/100
eknowledger/toolbench#266 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 78/100
devdotfast/whiteboard#1415 · 1 条评论 ·
维护者通常 1 天内回复