TM Security Assessment (quick tier)

Quick and change-scoped. This tier does NOT re-model the whole system or hunt the entire repo. It scopes to a git worktree / branch, diffs against a base, and assesses only the changed attack surface — fast enough to run on every branch before merge. It stays threat-model-aware: if a model exists it uses it to prioritise, but it does not build a full one.

Two tiers, pick by need:

• This skill (quick) — a branch/worktree diff pass; minutes; catches regressions and obvious bugs in what changed.
• tm-security-review (comprehensive) — full threat model as input + deep whole-repo zeroday hunt with a PoC per finding. Escalate to it when this pass flags a design-level risk or the change touches a trust boundary.

It composes two sibling skills, scoped to the diff:

• security-assessment (../security-assessment/SKILL.md) — OWASP Top 10 checks, run only over changed files.
• 0day-scanner (../0day-scanner/SKILL.md) in light mode — it is built for commit/PR/branch/diff analysis; drive it with the branch or diff.

When to use

• "quick security assessment on this branch/worktree", "pre-merge security check", "scan the diff"
• Fast, cheap, change-scoped — not a full audit