iii-getting-started

SUSPICIOUS. The skill is mostly coherent with its stated purpose and uses same-org docs/install paths, so there is no strong sign of malware or credential theft. However, the unpinned curl|sh installer and especially the transitive skill installation step add meaningful trust-chain risk that is disproportionate for a basic getting-started guide.