community-marketplace-governance
Overview
Define and implement governance frameworks for community-driven skill marketplace—including contributor trust levels, content moderation, lifecycle management, and revenue sharing. This skill ensures sustainable and safe community skill sharing at scale.
Key Capabilities
1. Trust & Contributor Tiers
- Tier System: Anonymous → Verified → Trusted → Maintainer levels
- Verification Process: Email, portfolio, code review baseline for tier progression
- Reputation Scoring: Star ratings, download counts, maintenance history
- Revocation Policies: Automatic downgrade for 90+ days inactivity or policy violations
- Community Badges: Verified, Maintained, Endorsed, Revenue-Sharing tiers
2. Content Moderation
- Automated Screening: OWASP checks, malware scanning, dependency validation
- Manual Review Queue: Prioritized review for tier progression and high-impact skills
- Appeal Process: Transparent dispute resolution with community voting
- Flagging System: User-reported issues with automatic escalation rules
- Takedown Procedures: DMCA/legal compliance workflow with legal team integration
3. Lifecycle Management
- Version Tracking: Semantic versioning with compatibility maturity matrix
- Deprecation Process: 12-month notice period with migration guides
- Archive Policy: Skills move to read-only after 24 months inactivity
- Reactivation: Path for maintainers to resurrect archived skills
- Dependency Resolution: Transitive dependency compatibility checks
4. Economics & Revenue Sharing
- Revenue Model: Micropayment, subscription, or sponsorship tiers
- Payout Structures: Monthly/quarterly/yearly with programmable splits
- Tax Compliance: 1099/W9 forms, country-specific handling
- Fraud Detection: Unusual download patterns, bot prevention
- Transparency: Public dashboard of payouts and top contributors
Governance Model
Contributor → Submission → Automated Review → Manual Review → Published
↓ ↓
Pass/Fail Approved/Changes/Reject
Maintenance:
Published → Monthly Check-in → Activity Score → Tier Adjustment
↓
Active (Tier+1) or Deprecated (Tier-1)
Disputes:
Report → Triage → Investigation → Resolution (Appeal or Uphold)
↓
Emergency: Immediate Removal
Mandates
- Transparency First: All moderation decisions logged publicly (appeals visible)
- Due Process: 30-day appeal window with clear reasoning documentation
- Security Baseline: All published skills pass automated security gates
- OWASP Compliance: No SQL injection, XSS, or hardcoded credentials allowed
- Privacy Protection: Contributor data anonymized except for payouts
- Accessibility: All skills include README and basic documentation
Best Practices
- Minimize False Positives: Automated screening should allow 99% of legitimate submissions
- Invest in Prevention: Community guidelines > reactive moderation
- Reward Maintenance: Higher payouts for actively maintained skills
- Encourage Mentorship: Pair new contributors with trusted maintainers
- Regular Audits: Quarterly security and compliance reviews
Trust Tier Progression
| Tier | Requirements | Privileges | Removal |
|---|---|---|---|
| Anonymous | Email verified | Submit skills (limited) | Spam report |
| Verified | Portfolio + 1 published skill | Full submission | 30-day notice |
| Trusted | 3+ published, >100 downloads, 4+ rating | Revenue sharing | Appeals period |
| Maintainer | 1+ actively maintained, <30d activity | Moderation rights | Community vote |
Resources
- Community Guidelines
- Moderation Playbook
- Revenue Sharing Terms
- Security Baseline Checklist