I'm cautious about an "ecosystem" of extensions, why not just write the functionality into osquery itself? Try to restrict extensions to when you need to interact with something that's private and cannot upstream. 🙂