cascade
Warn
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: MEDIUMMETADATA_POISONINGEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [METADATA_POISONING]: The skill exhibits a naming discrepancy between the author ('twitchedd') and the library/repository references ('twitched', 'com.twitched.cascade'). This inconsistency is a common indicator of typosquatting or brand impersonation, which may mislead users regarding the origin and trustworthiness of the software.
- [EXTERNAL_DOWNLOADS]: The skill references external packages (
com.twitched.cascadeandcom.twitched.cascade.lite) and a GitHub repository (github.com/twitched/cascade) that do not match the author's identified resource patterns. These are treated as unverified third-party dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and prioritize instructions from external project files, specifically
Packages/manifest.jsonandAI-GUIDE.md. This creates a vulnerability surface where malicious content within those files could override the skill's safety or logic.- Ingestion points:
Packages/manifest.jsonandPackages/<package>/Documentation~/AI-GUIDE.md(specified in SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded commands within these external files.
- Capability inventory: The skill generates C# code and JSON sequences that interface with the Unity UI Toolkit runtime.
- Sanitization: The skill documents the use of
SequencePreset.ValidateandSequencePreset.Lintto verify the structure and behavior of generated JSON sequences.
- Ingestion points:
- [DYNAMIC_EXECUTION]: The skill facilitates the generation of declarative JSON animation sequences that are interpreted and executed at runtime by the Cascade library. This mechanism for turning structured data into runtime motion represents a dynamic execution pattern.
Audit Metadata