Plugins / Reading & PDFs

ChatPapers

by yehongyu1234 · github.com/yehongyu1234/chatpapers

An AI paper reading and summarization plugin for Zotero 9+: chat with PDFs, generate summaries, compare multiple papers, listen to AI voice lectures, and save results as Zotero notes—all inside Zotero.

View source
Downloads a .xpi file (0.2 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
4
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because updates are set to come from an address someone else could control, and 3 more findings
Applies to v0.2.1, released 1 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyUpdates are set to come from an address someone else could controlThe developer uploaded the release file from the yehongyu1234 account. We haven't yet checked whether this file matches the public source code.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Updates
Updates are set to come from chatpapers/chatpapers on GitHub, which doesn't exist or isn't public: if the owner of "chatpapers" published an update there, Zotero would install itThe update address is broken (nothing is there), so Zotero can't update it
Where your data goesIts code only names services we could identify5 addresses in 2 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (4)
api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.siliconflow.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
On your computer (1)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 5 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/chatpapers.js · line 129

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/chatpapers.js · line 85

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Launches programs on your computercontent/scripts/chatpapers.js · line 20275

Programs it names include cmd

return Components.classes["@mozilla.org/process/util;1"].createInstance(
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 9, 10 · not 11 betaManual updates only
Zotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 1 Sep 20262 contributors
No further detail for this area yet.
LanguagesDocumentation in ChineseInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: Ollama or LM Studio running locally. Needs a key (OpenRouter, OpenAI, DeepSeek and SiliconFlow): Cloud providers (OpenRouter, OpenAI, DeepSeek, SiliconFlow) and cloud TTS need a key.
  • Or: a model on your own computerIt can use a local model such as Ollama

Where your data goes

We found: its code only names services we could identify. 5 addresses in 2 groups.

AI services (4)
api.deepseek.comnamed in its codeapi.openai.comnamed in its codeapi.siliconflow.cnnamed in its codeopenrouter.ainamed in its code
On your computer (1)
127.0.0.1named in its code

Forks and alternatives

No forks listed.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • Bionic for ZoteroReading & PDFsA+Recommended, tested in Zotero
  • ZotLitReading & PDFs · Citing & writingA+Recommended, tested in Zotero
  • Zotero Focused ModeReading & PDFsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install ChatPapers
BUse with care
Before you install: Updates are set to come from an address someone else could control, and 3 more findings.Read the finding
Compare with similar plugins