Also we would like to understand and leverage the option of building our own extensions. Does osquery perform any checks on those extensions? If so, can someone list which are those checks and requirements? Like for example, to verify if the extensions are safe to use and do not contain any malware?

> Does osquery perform any checks on those extensions? Extensions are third-party software, so it’s an “install at your own risk” model

At startup there is a filesystems permission check performed. But that's about it. (And can be overridden with a command line option)

Awesome, thanks a lot!