Downloads a .xpi file (0.3 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
4
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
NOASSERTION
B
Atlas gradeUse with care
A+ABBC
because it launches programs on your computer
Next rung: A, once every finding in the code comes out low.
Applies to v0.10.49, released 24 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
文
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code; not yet checked against the published sourceThe developer uploaded the release file from the zxyl1003 account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify16 addresses in 4 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (13)
Antigravity (Google)Codex CLI (OpenAI)api.anthropic.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.minimax.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.moonshot.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.moonshot.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.dashscope.aliyuncs.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.generativelanguage.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.open.bigmodel.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.token-plan.cn-beijing.maas.aliyuncs.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Apps you connect (1)
mineru.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Zotero (1)
Zotero lookup services
On your computer (1)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Powerful capabilitiesLaunches programs on your computer, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Launches programs on your computermediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Works with files on your computerlowLow concern.Uses Zotero's password managerlowLow concern.Lets programs on this computer connect through Zotero's built-in server
Where we found it
Launches programs on your computerfolio.js · line 24612
Programs it names include agy
var { Subprocess } = ChromeUtils.importESModule("resource://gre/modules/Subprocess.sys.mjs");
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 10 · not 9, 11 betaUpdates automatically
Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.
What you'll need
Detected automatically
An API keyNeeds a key you get from the service (ChatGPT account, OpenAI, Anthropic, Google Gemini, DeepSeek, OpenRouter, Qwen, Kimi, GLM and MiniMax). What needs it: the AI model connection (a ChatGPT/Antigravity account sign-in or an API key for DeepSeek, OpenAI, Anthropic, Gemini, etc.); MinerU PDF parsing is an extra.
Where your data goes
We found: only contacts services we could identify. 16 addresses in 4 groups.
AI services (13)
Antigravity (Google)Codex CLI (OpenAI)api.anthropic.comnamed in its codeapi.deepseek.comnamed in its codeapi.minimax.cnnamed in its codeapi.moonshot.ainamed in its codeapi.moonshot.cnnamed in its codeapi.openai.comnamed in its codedashscope.aliyuncs.comnamed in its codegenerativelanguage.googleapis.comnamed in its codeopen.bigmodel.cnnamed in its codeopenrouter.ainamed in its codetoken-plan.cn-beijing.maas.aliyuncs.comnamed in its code