corbits-marketplace

SUSPICIOUS. The overall workflow is coherent for a paid API marketplace, and the cited domains/tools appear official, so this is not confirmed malware. However, the skill materially expands trust by having the user export a MoonPay wallet private key and give it to Corbits, stores that secret locally, routes paid API access through Corbits proxies, and enables autonomous financial actions; that combination makes the skill high-impact and riskier than its convenience framing suggests.