A great tool no doubt, but I'm personally not a fan of their extensions architecture. Last time I checked, it silently installed it's own complete and default build of NodeJS with NPM and everything.

The extensions themselves are manually reviewed before being made available, but are - or were at least then - otherwise given free reign over the host system and even inherit the accessibility permissions (aka MacOS "godmode" for apps) that Raycast requires to function. To make this whole thing even more questionable, extensions are automatically and silently updated in the background, without a way for the user to disable this.

Makes you wonder in what other parts of this closed source app secure practices might have also taken a backseat.

Long story short: Very helpful tool, but their extensions architecture is quite insecure.