ask-cli

SUSPICIOUS. The business purpose is plausible for StoreKit work, but the skill’s core dependency is an unverified `ask` CLI that receives Apple API credentials and sensitive customer/transaction inputs. Because the binary and its network endpoints cannot be tied to an official Apple tool or a clearly documented same-org project, the credential forwarding and data flow are disproportionate and high risk.