k2f-fillable-pdf

SUSPICIOUS: the core form-design purpose is benign and proportionate, with no credential collection or exfiltration. The main issue is transitive trust: this skill tells the agent to install another skill, and the referenced repo path conflicts with current official K2F documentation, creating a meaningful provenance risk.