Plugins / AI & summaries

Papilot 文献副驾

by yebuqiu · github.com/yebuqiu/zotero-papilot

An AI reading assistant for Zotero.

Papilot 文献副驾 has Atlas grade C (not recommended) because any website you visit can change your library through it. It works with Zotero 7–10, 11 beta. Last checked 6 Nov 2026.

View source
Downloads a .xpi file (2.3 MB). In Zotero, open Tools → Plugins and install it from the file.
In useAn estimate of how many copies of Zotero have it: Zotero downloads each new version once for every copy that has the plugin, so we count the downloads of its most-downloaded recent release. Rounded. Plugins that update from outside GitHub count low.
61
DownloadsAll-time downloads of its release files from GitHub, counting every update. Installs from elsewhere aren't counted.
130
ReleasesVersions published on GitHub. Everyone who has the plugin downloads each one again, which adds up in Downloads.
3
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
Apache-2.0
C
Atlas gradeNot recommended
because any website you visit can change your library through it
Applies to v0.88.4, released 3 Nov 2026Code checked · not yet tested in a live Zotero
Contacts a shadow libraryUsing a site such as Sci-Hub carries legal risk in some countries.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code; not yet checked against the published sourceThe developer uploaded the release file from the yebuqiu account. We haven't yet checked whether this file matches the public source code. 6 code files couldn't be parsed and were only scanned for known patternsUnknownWe couldn't check this yet.
Updates
Updates come from cassiuschen9261/zotero-papilot on GiteeThe update address offers version 0.88.4, which isn't newer than this one, so Zotero won't update it for now
Where your data goesContacts servers we couldn't identify: b.r88r.top, pp.xinglintools.top and 4 more83 addresses in 7 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Not identified (6)
159.75.236.151named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.43.143.27.149named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.b.r88r.toppp.xinglintools.topsci-net.xyzwww.060193.top
AI services (14)
api.baichuan-ai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.hunyuan.cloud.tencent.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.lingyiwanwu.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.minimaxi.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.moonshot.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.siliconflow.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.stepfun.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.ark.cn-beijing.volces.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.dashscope.aliyuncs.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.open.bigmodel.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.qianfan.baidubce.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.spark-api-open.xf-yun.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Translation (17)
DeepLX (DeepL)aidemo.youdao.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api-free.deepl.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.cognitive.microsofttranslator.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepl.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.fanyi.baidu.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.interpreter.caiyunai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.mymemory.translated.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.edge.microsoft.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.fanyi-api.baidu.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.libretranslate.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.tmt.tencentcloudapi.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.translate.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.translate.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.transmart.qq.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.bing.comwww.deepl.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Scholarly services (43)
api.crossref.orgapi.openalex.orgapi.semanticscholar.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.unpaywall.orgarxiv.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chn.oversea.cnki.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.doaj.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.doi.orgeuropepmc.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.eutils.ncbi.nlm.nih.govexport.arxiv.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.fsso.cnki.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.kns.cnki.netlogin.cnki.netnavi.cnki.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.oversea.cnki.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.pubmed.ncbi.nlm.nih.govnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.pubscholar.cnrss.sciencedirect.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.s.wanfangdata.com.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.scholar.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sci-hub.eenamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sci-hub.mksa.topnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sci-hub.rennamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sci-hub.runamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sci-hub.senamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sci-hub.stnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.biorxiv.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.bmj.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.cqvip.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.easyscholar.ccwww.ebi.ac.ukwww.medrxiv.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.nature.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.ncpssd.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.nejm.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.pnas.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.sci-hub.rennamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.sci-hub.stnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.science.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.semanticscholar.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.ssrn.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.wanfangdata.com.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Apps you connect (1)
dav.jianguoyun.com
Code hosting (1)
gitee.com
On your computer (1)
127.0.0.1
Where we found it
b.r88r.topchrome/content/scripts/features/third-source.js · line 36
base: "http://b.r88r.top",
pp.xinglintools.topchrome/content/scripts/ai/account.js · line 84
SERVER_DEFAULT: "https://pp.xinglintools.top",
sci-net.xyzchrome/content/scripts/features/fulltext-resolver.js · line 38
DEFAULT_SCINET: "https://sci-net.xyz",
Powerful capabilitiesAny website you visit can change your library through it, and 8 moreHighHigh concern: a serious problem. One high finding makes the grade C.
High concern (1)
Any website you visit can change your library through it
Medium concern (4)
Changes Zotero settings that aren't its ownAdds Zotero translators it downloadsLaunches programs on your computerSends your text or keys unencrypted (http://) to b.r88r.top and www.060193.top
Low concern (3)
Uses the clipboardStores API keys or passwordsWorks with files on your computer
Not a concern (1)
Lets programs on this computer connect through Zotero's built-in server
Where we found it
Any website you visit can change your library through itchrome/content/scripts/features/mcp.js · line 398
Zotero.Server.Endpoints[this.PATH] = Ctor;
Changes Zotero settings that aren't its ownchrome/content/scripts/features/fulltext-resolver.js · line 160

Adds sources to Zotero's Find Available PDF

Zotero.Prefs.set(this.PREF, b, true);
Adds Zotero translators it downloadschrome/content/scripts/features/cn-translators.js · line 179
await Zotero.Translators.reinit({ fromSchemaUpdate: false });
Launches programs on your computerchrome/content/scripts/features/lit-pdf.js · line 97

Programs it names include powershell, pythonw

proc = Components.classes["@mozilla.org/process/util;1"].createInstance(Ci.nsIProcess);
Sends your text or keys unencrypted (http://) to b.r88r.top and www.…chrome/content/scripts/features/third-source.js · line 36

Anyone on the network in between can read it

base: "http://b.r88r.top",
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10, 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✓ works
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 3 Nov 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in ChineseInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Written by AI from the README

An AI reading assistant for Zotero. It covers selection and side-by-side PDF translation, chat, library-wide Q&A, AI notes and mind maps, journal subscriptions, Obsidian export and reading progress. Works with many model providers or a local Ollama.

Gathers the reading workflow for Chinese-language research into one plugin, with free translation engines and your own model keys. The account and membership service behind its official gateway is not part of the plugin.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: contacts servers we couldn't identify: b.r88r.top, pp.xinglintools.top and 4 more. 83 addresses in 7 groups.

Not identified (6)
159.75.236.151named in its code43.143.27.149named in its codeb.r88r.toppp.xinglintools.topsci-net.xyzwww.060193.top
AI services (14)
api.baichuan-ai.comnamed in its codeapi.deepseek.comnamed in its codeapi.hunyuan.cloud.tencent.comnamed in its codeapi.lingyiwanwu.comnamed in its codeapi.minimaxi.comnamed in its codeapi.moonshot.cnnamed in its codeapi.openai.comnamed in its codeapi.siliconflow.cnnamed in its codeapi.stepfun.comnamed in its codeark.cn-beijing.volces.comnamed in its codedashscope.aliyuncs.comnamed in its codeopen.bigmodel.cnnamed in its codeqianfan.baidubce.comnamed in its codespark-api-open.xf-yun.comnamed in its code
Translation (17)
DeepLX (DeepL)aidemo.youdao.comnamed in its codeapi-free.deepl.comnamed in its codeapi.cognitive.microsofttranslator.comnamed in its codeapi.deepl.comnamed in its codeapi.fanyi.baidu.comnamed in its codeapi.interpreter.caiyunai.comnamed in its codeapi.mymemory.translated.netnamed in its codeedge.microsoft.comnamed in its codefanyi-api.baidu.comnamed in its codelibretranslate.comnamed in its codetmt.tencentcloudapi.comnamed in its codetranslate.google.comnamed in its codetranslate.googleapis.comnamed in its codetransmart.qq.comnamed in its codewww.bing.comwww.deepl.comnamed in its code
Scholarly services (43)
api.crossref.orgapi.openalex.orgapi.semanticscholar.orgnamed in its codeapi.unpaywall.orgarxiv.orgnamed in its codechn.oversea.cnki.netnamed in its codedoaj.orgnamed in its codedoi.orgeuropepmc.orgnamed in its codeeutils.ncbi.nlm.nih.govexport.arxiv.orgnamed in its codefsso.cnki.netnamed in its codekns.cnki.netlogin.cnki.netnavi.cnki.netnamed in its codeoversea.cnki.netnamed in its codepubmed.ncbi.nlm.nih.govnamed in its codepubscholar.cnrss.sciencedirect.comnamed in its codes.wanfangdata.com.cnnamed in its codescholar.google.comnamed in its codesci-hub.eenamed in its codesci-hub.mksa.topnamed in its codesci-hub.rennamed in its codesci-hub.runamed in its codesci-hub.senamed in its codesci-hub.stnamed in its codewww.biorxiv.orgnamed in its codewww.bmj.comnamed in its codewww.cqvip.comnamed in its codewww.easyscholar.ccwww.ebi.ac.ukwww.medrxiv.orgnamed in its codewww.nature.comnamed in its codewww.ncpssd.cnnamed in its codewww.nejm.orgnamed in its codewww.pnas.orgnamed in its codewww.sci-hub.rennamed in its codewww.sci-hub.stnamed in its codewww.science.orgnamed in its codewww.semanticscholar.orgnamed in its codewww.ssrn.comnamed in its codewww.wanfangdata.com.cnnamed in its code
Apps you connect (1)
dav.jianguoyun.com
Code hosting (1)
gitee.com
On your computer (1)
127.0.0.1
Evidence · file and line
b.r88r.topchrome/content/scripts/features/third-source.js · line 36
base: "http://b.r88r.top",
pp.xinglintools.topchrome/content/scripts/ai/account.js · line 84
SERVER_DEFAULT: "https://pp.xinglintools.top",
sci-net.xyzchrome/content/scripts/features/fulltext-resolver.js · line 38
DEFAULT_SCINET: "https://sci-net.xyz",

Forks and copies

No forks listed.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer

Ratings and reviews

What people who use it say. This is separate from the grade, which is what the code does, and never changes it.

No ratings yet.

Write a review
Your rating of Papilot 文献副驾 v0.88.4

Your review is public, under the name you give, and published with the directory's data under CC BY 4.0. Links are removed. We never store your IP address: a scrambled code made from it is kept for 30 days to catch fake reviews. Every review is checked before it's published; how fake ones are spotted isn't published, so it can't be gamed.

Install Papilot 文献副驾
CNot recommended
We don't recommend itAny website you visit can change your library through it.
Better-graded plugins for the same jobA+NoteroA+zotxtA+ODF Scan for Zotero
Read what we found