Downloads a .xpi file (0.06 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
0
ContributorsPeople who have committed code to the repository.
18
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
A+ABBC
because updates are set to come from an address someone else could control, and 2 more findings
Next rung: A, once every finding in the code comes out low.
Applies to v1.1.0, released 7 May 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
文
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyUpdates are set to come from an address someone else could controlThe developer uploaded the release file from the lichong0429 account. We haven't yet checked whether this file matches the public source code.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Updates
Updates are set to come from hermes-dev/zotero-wiki-gen on GitHub, which doesn't exist or isn't public: if the owner of "hermes-dev" published an update there, Zotero would install itThe update address is broken (nothing is there), so Zotero can't update it
Where your data goesOnly contacts services we could identify5 addresses in 1 group.LowLow concern: normal for plugins that do this job. Listed so you know.
api.deepseek.comcontent/scripts/zoterowiki.js · line 3440
baseUrl: "https://api.deepseek.com/v1",
api.minimax.chatcontent/scripts/zoterowiki.js · line 3430
baseUrl: "https://api.minimax.chat/v1",
api.moonshot.cncontent/scripts/zoterowiki.js · line 3435
baseUrl: "https://api.moonshot.cn/v1",
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.Pages it creates load scripts from the weblowLow concern.
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zoterowiki.js · line 129