Plugins / AI & summaries

Zocrates

by alexplaka · github.com/alexplaka/Zocrates

An agentic assistant for Zotero.

Zocrates has Atlas grade C (not recommended) because it downloads and runs a program we haven't reviewed yet, and 1 more finding. It works with Zotero 10. Last checked 6 Nov 2026.

View source
Downloads a .xpi file (2.3 MB). In Zotero, open Tools → Plugins and install it from the file.
In useAn estimate of how many copies of Zotero have it: Zotero downloads each new version once for every copy that has the plugin, so we count the downloads of its most-downloaded recent release. Rounded. Plugins that update from outside GitHub count low.
2
DownloadsAll-time downloads of its release files from GitHub, counting every update. Installs from elsewhere aren't counted.
5
ReleasesVersions published on GitHub. Everyone who has the plugin downloads each one again, which adds up in Downloads.
2
StarsPeople who starred the repository on GitHub: a rough measure of interest.
1
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
because it downloads and runs a program we haven't reviewed yet, and 1 more finding
Applies to v0.91.0, released 6 Nov 2026Code checked · not yet tested in a live Zotero
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesContacts a server we couldn't identify: aka.ms7 addresses in 5 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Not identified (1)
aka.ms
AI services (2)
openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.datalab.tonamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Zotero (1)
Zotero lookup services
Code hosting (1)
github.com
On your computer (2)
127.0.0.1localhostnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
aka.msbootstrap.js · line 2135
const downloadUrl = "https://aka.ms/vs/17/release/vc_redist.x64.exe";
github.combootstrap.js · line 1658
const url = "https://github.com/astral-sh/uv/releases/latest/download/" + artifactName;
Powerful capabilitiesDownloads and runs a program we haven't reviewed yet, and 6 moreHighHigh concern: a serious problem. One high finding makes the grade C.
High concern (2)
Downloads and runs a program we haven't reviewed yetInstalls and runs npm or PyPI packages without a fixed version
Medium concern (1)
Launches programs on your computer
Low concern (4)
Uses the clipboardStores API keys or passwordsWorks with files on your computerUses Zotero's password manager
Where we found it
Downloads and runs a program we haven't reviewed yetbootstrap.js · line 2140

We haven't yet reviewed who publishes the file or whether anything stops it changing, so it counts as a high concern until we do. From aka.ms; not checked against a fingerprint fixed in the plugin.

res = await fetch(downloadUrl, { cache: "no-store", signal: controller ? controller.signal : undefined });
Installs and runs npm or PyPI packages without a fixed versionbootstrap.js · line 1925

source: installs the newest version each time, at startup, without asking

const args = ["pip", "install", "--python", venvPython, wheelInstallTarget];
Launches programs on your computerbootstrap.js · line 1311
"resource://gre/modules/Subprocess.sys.mjs"
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 10 · not 9, 11 betaUpdates automatically
Zotero 9 ✗ doesn't workZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 6 Nov 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: contacts a server we couldn't identify: aka.ms. 7 addresses in 5 groups.

Not identified (1)
aka.ms
AI services (2)
openrouter.ainamed in its codewww.datalab.tonamed in its code
Zotero (1)
Zotero lookup services
Code hosting (1)
github.com
On your computer (2)
127.0.0.1localhostnamed in its code
Evidence · file and line
aka.msbootstrap.js · line 2135
const downloadUrl = "https://aka.ms/vs/17/release/vc_redist.x64.exe";
github.combootstrap.js · line 1658
const url = "https://github.com/astral-sh/uv/releases/latest/download/" + artifactName;

Other plugins that do this

Matched on what they do

For the same job, work with Zotero 10 and graded B or better. Closest match first.

  • B
    BibGenie

    An AI research agent in the Zotero sidebar that answers questions using items, PDFs, notes, snapshots, images or collections as context.

    Matches “ai research assistant” · 21,422 downloads · Active · Zotero 7–10
    Can use a local model
Compare all 2 side by side
How we pick these

By how closely what they do matches this plugin, using descriptions and the phrases people search with. Copies and forks of this plugin are listed under Forks and copies instead. No plugin pays to appear here.

Forks and copies

No forks listed.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer

Ratings and reviews

What people who use it say. This is separate from the grade, which is what the code does, and never changes it.

No ratings yet.

Write a review
Your rating of Zocrates v0.91.0

Your review is public, under the name you give, and published with the directory's data under CC BY 4.0. Links are removed. We never store your IP address: a scrambled code made from it is kept for 30 days to catch fake reviews. Every review is checked before it's published; how fake ones are spotted isn't published, so it can't be gamed.

Install Zocrates
CNot recommended
We don't recommend itIt downloads and runs a program we haven't reviewed yet, and 1 more finding.
Better-graded plugins for the same jobA+Add Items from TextA+AutotagA+Zotero AI Assistant
Read what we found