Besides random extensions, I also recommend checking when the last update was if possible.

I used to use the KDE Plasma Integration extension but have since ditched it when I found out the last update was in 2024, a little over a year ago now. Unless they update it, I'mma treat that 1 year old extension like a 10 year old extension in terms of security.