k2f-survey-form

SUSPICIOUS: the survey-form skill is mostly benign documentation, but it delegates core functionality by instructing the agent to install another skill. The main risk is transitive trust in the external `suzheng/k2f` skill, not direct malware behavior in this skill itself.