ask-cli

The skill presents a coherent and proportionate footprint for a StoreKit query utility. The primary security considerations involve handling of sensitive authentication material (issuer private key) and ensuring output does not leak PII or sensitive transaction identifiers. If the ask CLI is trusted and credentials are protected, the risk remains moderate and acceptable for a developer tool; otherwise, credential exposure and key management should be reviewed. Overall, benign with caveats around secret handling.