JustHandled LabsHere is what we have actually tested, and what those tests do not establish.
A host reading SKILL.md is only the starting point. It also needs the right access route, supporting files, tools and runtime. A test in Claude does not verify Codex, Cursor or another host.
Updated October 24, 2026. This first evidence set covers four workflows, not every skill in the catalog. An absent row means not verified here, not incompatible.
Read the machine-readable evidence · Find a skill for your task
Marketplace access does not include an AI-agent subscription. Cloud-host execution may process data remotely; review your host’s privacy settings and start with fictional inputs.
Six synthetic payload/entrypoint cases passed; no publishing performed
All four delivered texts match sealed source after CRLF-to-LF normalization
Not covered: buyer checkout; installed-package workflow; other hosts.
Six synthetic redirect/input/preservation controls passed; no redirects deployed
All four delivered texts match sealed source after CRLF-to-LF normalization
Not covered: buyer checkout; installed-package workflow; other hosts.
12 synthetic URL, policy, malformed-input, output-preservation and escaping controls passed. No links opened or campaigns changed.
Three files match after line-ending normalization. Six Unicode escapes in the script were converted by the host tool-input channel, then restored to match the sealed source hash. All 12 controls were rerun with identical results and output hashes. This is not direct byte-identical connector retrieval.
Not covered: buyer checkout; installed-package workflow; other hosts.
15 synthetic controls passed, covering source-bound drafting, three exclusion explanations, no-draft notices, repeatability and output-path protections. No applications submitted.
The retrieved SKILL.md, helper and input contract match sealed source after host transcription. Hashes measure connector content and transcription together, not a byte-direct download. Other package files were not retrieved in this pass.
Not covered: buyer checkout; installed-package workflow; other agent hosts; Windows or macOS in this host replay.
These checks ran against locally held sealed packages on Windows, Python 3.13.12, on October 24, 2026. They are not evidence of fresh marketplace delivery, execution in another agent, or buyer checkout. Missing host evidence means unverified, not incompatible.
Package 1.1.2 · 25/25 local regression checks passed.
Sealed package tested; no new candidate release is implied.
Package 1.0.0 · 8/8 local regression checks passed.
Sealed package tested; no new candidate release is implied.
Package 1.0.0 · 8/8 local regression checks passed.
Sealed package tested; no new candidate release is implied.
Package 1.0.0 · 10/10 local regression checks passed.
Sealed package tested; no new candidate release is implied.
Package 1.0.0 · 10/10 local regression checks passed.
Sealed package tested; no new candidate release is implied.
Package 1.0.0 · 10/10 local regression checks passed.
Sealed package tested; no new candidate release is implied.
A matching hash verifies the recorded file content, not safety. Synthetic controls test named cases, not every possible input. A later package version needs its own evidence; older results remain labelled rather than silently carried forward.
Check the product page for the current offer and requirements. If your host or version is not covered, treat that route as unverified and use a fictional example before supplying real work.