icloud-findmy

SUSPICIOUS. The skill's core capability matches its stated purpose, and installation comes from legitimate package ecosystems, so it does not look malicious. However, it relies on an unofficial third-party CLI for Apple authentication, handles highly sensitive location data, and recommends storing the Apple ID in local config; those factors make the trust and privacy footprint higher than ideal.