Zotero Plugins Atlas
Plugins / AI & summaries

Zassistant

by capgarven · github.com/capgarven/zotero-assistant

An AI tool helps you to fully understand the papers.

Zassistant has Atlas grade B (use with care) because updates are set to come from an address someone else could control, and 1 more finding. It works with Zotero 10. Last checked 6 Nov 2026.

AI & summaries
View source
Downloads a .xpi file (0.1 MB). In Zotero, open Tools → Plugins and install it from the file.
In useAn estimate of how many copies of Zotero have it: Zotero downloads each new version once for every copy that has the plugin, so we count the downloads of its most-downloaded recent release. Rounded. Plugins that update from outside GitHub count low.
1
DownloadsAll-time downloads of its release files from GitHub, counting every update. Installs from elsewhere aren't counted.
4
ReleasesVersions published on GitHub. Everyone who has the plugin downloads each one again, which adds up in Downloads.
3
StarsPeople who starred the repository on GitHub: a rough measure of interest.
2
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
MIT
B
Atlas gradeUse with care
because updates are set to come from an address someone else could control, and 1 more finding
Applies to v1.0.2, released 5 Nov 2026Code checked · not yet tested in a live Zotero
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyUpdates are set to come from an address someone else could controlThe developer uploaded the release file from the capgarven account. We haven't yet checked whether this file matches the public source code.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Updates
Updates are set to come from "zotero-assistant" on GitHub, an account that doesn't exist: anyone who registers that name could publish an update Zotero would installThe update address is broken (nothing is there), so Zotero can't update it
Where your data goesIts code only names services we could identify5 addresses in 1 group.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (5)
api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.moonshot.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.dashscope.aliyuncs.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.generativelanguage.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Powerful capabilitiesLaunches programs on your computer, and 3 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Medium concern (1)
Launches programs on your computer
Low concern (3)
Uses the clipboardStores API keys or passwordsWorks with files on your computer
Where we found it
Launches programs on your computercontent/scripts/context.js · line 437
await Zotero.Utilities.Internal.exec(python, ["-c", "import markitdown"]);
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 10 · not 9, 11 betaManual updates only
Zotero 9 ✗ doesn't workZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 5 Nov 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in English and ChineseInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: its code only names services we could identify. 5 addresses in 1 group.

AI services (5)
api.deepseek.comnamed in its codeapi.moonshot.ainamed in its codeapi.openai.comnamed in its codedashscope.aliyuncs.comnamed in its codegenerativelanguage.googleapis.comnamed in its code

Forks and copies

No forks listed.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer

Ratings and reviews

What people who use it say. This is separate from the grade, which is what the code does, and never changes it.

No ratings yet.

Write a review
Your rating of Zassistant v1.0.2

Your review is public, under the name you give, and published with the directory's data under CC BY 4.0. Links are removed. We never store your IP address: a scrambled code made from it is kept for 30 days to catch fake reviews. Every review is checked before it's published; how fake ones are spotted isn't published, so it can't be gamed.

Install Zassistant
BUse with care
Before you install: Updates are set to come from an address someone else could control, and 1 more finding.Read the finding
Compare with similar plugins