Third-party plugins boost ChatGPTs capabilities. But security researchers say they add an extra layer of risk.