skills/jablonkai/skills/rebelle/Gen Agent Trust Hub

rebelle

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a shell script wrapper (scripts/rebelle-batch.sh) to execute the Rebelle Motion IO binary for headless batch rendering. This script manages the process lifecycle, monitors progress through log files, and ensures the application is correctly terminated after tasks are complete.- [SAFE]: The skill implements a custom, dependency-free WebSocket client (scripts/rebelle_ws.py) to communicate with the Rebelle Pro application over the local loopback interface (127.0.0.1). This communication is restricted to local host control and does not involve external network connections.- [SAFE]: The skill processes structured JSON data to drive the painting engine, presenting a standard automation interface. \n
  • Ingestion points: JSON event files (e.g., events.json) are processed by scripts/rebelle-batch.sh and the scripts/rebelle_ws.py CLI tool. \n
  • Boundary markers: No specific boundary markers or 'ignore' instructions are present in the JSON processing logic. \n
  • Capability inventory: The skill has the capability to execute shell commands, run local binaries, and perform local network operations on the loopback interface. \n
  • Sanitization: The scripts/rebelle_events.py utility uses the standard Python json library for serialization, which prevents structural injection in the generated event files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 08:37 PM
Security Audit — agent-trust-hub — rebelle