ams-cli

SUSPICIOUS. The skill’s functional scope matches Apple Maps workflows, but it delegates authentication and API calls to a non-Apple third-party CLI and forwards an Apple JWT into that tool. That is a material trust and credential-handling risk even without direct evidence of malware.