I think it'd be pretty cool to have, but as @Michael Bailey eluded to, osquery isn't exactly intended for responding to things, only collecting events. GRR seems much better suited, or making an osquery extension if one were so inclined.