Plugins / Reading & PDFs

Zotero Library Bridge

by liongkj · github.com/liongkj/zotero-library-bridge-skills

Local-only Zotero bridge addon with companion Claude skills

View source
Downloads a .xpi file (0.02 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
4
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
because any website you visit can make it act through its local server: it doesn't check where requests come from
Applies to v0.3.3, released 21 Mar 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers version 0.3.3, which isn't newer than this one, so Zotero won't update it for now
Where your data goesOnly contacts services we could identify3 addresses in 3 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
Scholarly services (1)
doi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Zotero (1)
Zotero lookup services
On your computer (1)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Powerful capabilitiesAny website you visit can make it act through its local server: it doesn't check where requests come from, and 1 moreHighHigh concern: a serious problem. One high finding makes the grade C.
Any website you visit can make it act through its local server: it doesn't check where requests come fromhighHigh concern: a serious problem.Works with files on your computerlowLow concern.
Where we found it
Any website you visit can make it act through its local server: it d…chrome/content/scripts/zoterolibrarybridge.js · line 55

A website can make it change your library

const candidate = Components.classes["@mozilla.org/network/server-socket;1"].createInstance(Components.interfaces.nsIServerSocket);
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10, 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✓ works
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceArchived · last release 21 Mar 20262 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: only contacts services we could identify. 3 addresses in 3 groups.

Scholarly services (1)
doi.orgnamed in its code
Zotero (1)
Zotero lookup services
On your computer (1)
127.0.0.1named in its code

Forks and alternatives

No forks listed.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • ZoplicateOrganising & tagsA+Recommended, tested in Zotero
  • ZotMoovOrganising & tags · Files, sync & backupA+Recommended, tested in Zotero
  • Zutilo Utility for ZoteroOrganising & tagsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero Library Bridge
CNot recommended
We don't recommend itAny website you visit can make it act through its local server: it doesn't check where requests come from.
Better-graded plugins for the same jobA+NoteroA+ZoplicateA+ZotMoov
Read what we found