Zotero Plugins Atlas
Plugins / AI & summaries

Glossa

by senyamiku1101 · github.com/senyamiku1101/glossa

An open-source AI assistant in the item pane and a floating chat.

Glossa has Atlas grade B (use with care) because a zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 1 more finding. It works with Zotero 7–10. Last checked 6 Nov 2026.

AI & summariesTranslation
View source
Downloads a .xpi file (0.4 MB). In Zotero, open Tools → Plugins and install it from the file.
In useAn estimate of how many copies of Zotero have it: Zotero downloads each new version once for every copy that has the plugin, so we count the downloads of its most-downloaded recent release. Rounded. Plugins that update from outside GitHub count low.
76
DownloadsAll-time downloads of its release files from GitHub, counting every update. Installs from elsewhere aren't counted.
76
ReleasesVersions published on GitHub. Everyone who has the plugin downloads each one again, which adds up in Downloads.
2
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because a zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 1 more finding
Applies to v0.2.18, released 22 Oct 2026Code checked · not yet tested in a live Zotero
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify25 addresses in 2 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (24)
api-inference.modelscope.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.anthropic.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.fireworks.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.groq.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.hunyuan.cloud.tencent.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.minimax.ionamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.minimaxi.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.mistral.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.moonshot.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comapi.perplexity.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.siliconflow.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.stepfun.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.together.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.x.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.xiaomimimo.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.ark.cn-beijing.volces.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.dashscope.aliyuncs.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.generativelanguage.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.open.bigmodel.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.qianfan.baidubce.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.router.huggingface.conamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
On your computer (1)
localhostnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
api.openai.comcontent/scripts/glossa.js · line 6962
url: "https://api.openai.com",
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Medium concern (2)
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)
Low concern (3)
Uses the clipboardWorks with files on your computerUses Zotero's password manager
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/glossa.js · line 129

zotero://plugin. zotero-plugin-toolkit removed this link in version 6.0.0; this plugin is built with an older version

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/glossa.js · line 85

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 22 Oct 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in English and ChineseInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Written by AI from the README

An open-source AI assistant in the item pane and a floating chat. It translates PDF selections (including with two models together), keeps a glossary and translation board, and records the passages sent with each answer. Needs your own API key for OpenAI, Anthropic or compatible services.

For people who want AI help on papers without a paid tier or closed code. Keys go only to the provider you pick, and chats are stored as local JSON files.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: only contacts services we could identify. 25 addresses in 2 groups.

AI services (24)
api-inference.modelscope.cnnamed in its codeapi.anthropic.comnamed in its codeapi.deepseek.comnamed in its codeapi.fireworks.ainamed in its codeapi.groq.comnamed in its codeapi.hunyuan.cloud.tencent.comnamed in its codeapi.minimax.ionamed in its codeapi.minimaxi.comnamed in its codeapi.mistral.ainamed in its codeapi.moonshot.cnnamed in its codeapi.openai.comapi.perplexity.ainamed in its codeapi.siliconflow.cnnamed in its codeapi.stepfun.comnamed in its codeapi.together.ainamed in its codeapi.x.ainamed in its codeapi.xiaomimimo.comnamed in its codeark.cn-beijing.volces.comnamed in its codedashscope.aliyuncs.comnamed in its codegenerativelanguage.googleapis.comnamed in its codeopen.bigmodel.cnnamed in its codeopenrouter.ainamed in its codeqianfan.baidubce.comnamed in its coderouter.huggingface.conamed in its code
On your computer (1)
localhostnamed in its code
Evidence · file and line
api.openai.comcontent/scripts/glossa.js · line 6962
url: "https://api.openai.com",

Forks and copies

No forks listed.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer

Ratings and reviews

What people who use it say. This is separate from the grade, which is what the code does, and never changes it.

No ratings yet.

Write a review
Your rating of Glossa v0.2.18

Your review is public, under the name you give, and published with the directory's data under CC BY 4.0. Links are removed. We never store your IP address: a scrambled code made from it is kept for 30 days to catch fake reviews. Every review is checked before it's published; how fake ones are spotted isn't published, so it can't be gamed.

Install Glossa
BUse with care
Before you install: A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 1 more finding.Read the finding
Compare with similar plugins