High concern (2)Installs and runs npm or PyPI packages without a fixed versionIts AI agent can run code it writes inside Zotero without asking you
Medium concern (4)Changes settings in other programs or on your computerA zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)Launches programs on your computer
Low concern (7)Uses the clipboardStores API keys or passwordsRuns code it assembles while runningWorks with files on your computerRuns its own server for programs on this computerIts pages ask for web scripts, which Zotero blocksOther programs on this computer can change your library through it
Not a concern (1)Lets programs on this computer connect through Zotero's built-in server
Where we found itInstalls and runs npm or PyPI packages without a fixed versioncontent/scripts/seerai.js · line 1761
Installs packages without a fixed version
const args = [
Its AI agent can run code it writes inside Zotero without asking youcontent/scripts/seerai.js · line 64282
Code inside Zotero can read and change your library and your files, and start other programs.
"function" != typeof e4 && (e4 = new Function("" + e4));Changes settings in other programs or on your computercontent/scripts/seerai.js · line 1805
Installs @anthropic-ai/claude-code`), @openai/codex`) and 27 more as command-line tools on your computer
notFoundGuidance: "The `codex` CLI was not found on your PATH. Install it (`npm install -g @openai/codex`) and run `codex login`, then click Detect again. If Codex is installed but not detecte
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/seerai.js · line 150779
zotero://plugin. zotero-plugin-toolkit removed this link in version 6.0.0; this plugin is built with an older version
Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;A zotero:// link can make it run code if you approve a promptcontent/scripts/seerai.js · line 150735
zotero://ztoolkit-debug
Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;Launches programs on your computercontent/scripts/seerai.js · line 829
Programs it names include cmd, git, sh; a setting lets Claude Code run without asking
return typeof Zotero.Utilities.Internal.exec === "function";