zod-to-form-cli

SUSPICIOUS: the skill's purpose is coherent for form code generation, but the install/execution trust is not. The named CLI package cannot be verified against the project's visible official docs/repo, and the publisher relationship is unclear, so executing it through pnpm/npx is disproportionate trust for an unverifiable package identity.