Pantheon Security (Cerberus)

Scans source code for OWASP Top 10 vulnerabilities using grep and glob tools.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/jschulte/pantheon --skill pantheon-security-cerberus
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Pantheon Security (Cerberus)
Source: https://github.com/jschulte/pantheon/tree/main/src/skills/pantheon-security
Command: npx skills add https://github.com/jschulte/pantheon --skill pantheon-security-cerberus

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automatically scans code for security vulnerabilities, ensuring that critical security gates are met before code is merged, preventing common security flaws.

Core Features & Use Cases

  • OWASP Top 10 Scanning: Identifies vulnerabilities across all nine categories of the OWASP Top 10.
  • Automated Security Gates: Integrates seamlessly into CI/CD pipelines to block insecure code.
  • Use Case: Before merging a new feature branch, run this Skill to automatically check for SQL injection, XSS, hardcoded secrets, and other critical vulnerabilities, ensuring the codebase remains secure.

Quick Start

Use the Pantheon Security skill to scan the code changes for story key '1-3' within the sprint artifacts directory.

Frequently Asked Questions about Pantheon Security (Cerberus)

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for OWASP Top 10 vulnerabilities before merging?

To scan code for OWASP Top 10 vulnerabilities before merging, use this Skill to automatically identify security flaws like SQL injection and XSS. It checks changed files using grep, glob, and bash to validate security gates in your code review phase.

What is automated security gate validation in a CI/CD pipeline?

Automated security gate validation in a CI/CD pipeline blocks insecure code from merging by scanning for critical vulnerabilities. This Skill enforces these gates by applying OWASP Top 10 checks to source code patterns identified during the code review phase.

Can I use bash and grep to detect hardcoded secrets in source code?

Yes, you can use bash and grep to detect hardcoded secrets in source code. This Skill leverages bash, grep, and glob tools to identify changed files and scan their patterns for hardcoded secrets and other critical security vulnerabilities.

Does this OWASP vulnerability scanner require any external dependencies?

This OWASP vulnerability scanner requires no external dependencies. It operates using standard built-in tools—specifically grep, glob, and bash—to identify changed files and detect security vulnerability patterns within the source code.

What is the best way to integrate threat detection into a code review phase?

The best way to integrate threat detection into a code review phase is automating an OWASP Top 10 checklist scan. This Skill identifies vulnerabilities across nine categories, preventing common security flaws before code is merged.