Zotero Plugins Atlas
Plugins / Reading & PDFs

Zotero Prism

by mxlapan · github.com/mxlapan/zotero-prism

为 Zotero 提供文库可视化、AI 问答、全文翻译与阅读管理

Reading & PDFsAI & summariesTranslation
View source
Downloads a .xpi file (0.6 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
1
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
24
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because it changes Zotero settings that aren't its own, and 2 more findings
Applies to v1.0.1, released 23 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify33 addresses in 6 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (15)
api.anthropic.comapi.openai.comseen when we ran itIt contacted this address when we ran it in Zotero.chat.deepseek.comchat.openai.comchat.qwen.aichatglm.cnchatgpt.comclaude.aigemini.google.comkimi.moonshot.cntongyi.aliyun.comv2.doc2x.noedgeai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.doubao.comwww.kimi.comyuanbao.tencent.com
Translation (8)
DeepLX (DeepL)api-free.deepl.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.cognitive.microsofttranslator.comapi.deepl.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.niutrans.comfanyi-api.baidu.comopenapi.youdao.comtranslate.googleapis.comseen when we ran itIt contacted this address when we ran it in Zotero.
Scholarly services (7)
api.crossref.orgapi.openalex.orgseen when we ran itIt contacted this address when we ran it in Zotero.api.semanticscholar.orgseen when we ran itIt contacted this address when we ran it in Zotero.doi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.export.arxiv.orgwww.easyscholar.ccwww.semanticscholar.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Apps you connect (1)
mineru.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Zotero (1)
Zotero lookup services
On your computer (1)
127.0.0.1
Where we found it
api.anthropic.comcontent/scripts/prism.js · line 307
{n}${t}`}function X3(){let e=Bn();return e.provider==="anthropic"?Io(e.baseURL||"https://api.anthropic.com","/v1/messages"):Io(e.baseURL,"/v1/chat/completions")}function No(){let e=Bn();return e.provi
api.openai.comcontent/scripts/prism.js · line 307
rn{name:"current",provider:U("lens.provider","openai"),baseURL:U("lens.baseURL","https://api.openai.com"),apiKey:U("lens.apiKey",""),model:U("lens.model","gpt-4o-mini"),fullURL:U("lens.fullURL",!1),te
chat.deepseek.comcontent/browser-extension/manifest.json · line 17
"https://chat.deepseek.com/*",
Powerful capabilitiesChanges Zotero settings that aren't its own, and 7 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Changes Zotero settings that aren't its ownmediumMedium concern: worth reading before you install.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.Lets programs on this computer connect through Zotero's built-in server
Where we found it
Changes Zotero settings that aren't its owncontent/scripts/prism.js · line 303

Turns Zotero's built-in server back on if you've turned it off, at startup, without asking

ailable \u2014 bridge disabled");return}Zotero.Prefs.get("httpServer.enabled")||Zotero.Prefs.set("httpServer.enabled",!0),e.Endpoints["/prism/bridge/hello"]=zi(["POST","GET"],(t,n)=>{let r=Yn();r.conn
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/prism.js · line 438

zotero://plugin

.`)}}catch(o){n.logError(o),Lu(o.message,!1)}},newChannel(i){this.doAction(i)}};Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"]=r}};function Lu(e,t){let n=new Z
A zotero:// link can make it run code if you approve a promptcontent/scripts/prism.js · line 438

zotero://ztoolkit-debug

ow:i})}catch(p){r.debug(p),i.console.log(p)}}},newChannel(n){this.doAction(n)}};Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"]=t}},e4=class Fs{static v
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10, 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✓ works
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 23 Sep 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in Chinese onlyInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: Library visualization, reading analytics and Google translation (the default engine). Needs a key (OpenAI, DeepL, Microsoft Translator, Baidu Translate, NiuTrans and easyScholar): The AI copilot (Lens) needs a key for its model provider (default OpenAI); some translation engines (DeepL, Microsoft, Baidu, NiuTrans) and easyScholar rankings need keys.

Where your data goes

We found: only contacts services we could identify. 33 addresses in 6 groups.

AI services (15)
api.anthropic.comapi.openai.comseen when we ran itchat.deepseek.comchat.openai.comchat.qwen.aichatglm.cnchatgpt.comclaude.aigemini.google.comkimi.moonshot.cntongyi.aliyun.comv2.doc2x.noedgeai.comnamed in its codewww.doubao.comwww.kimi.comyuanbao.tencent.com
Translation (8)
DeepLX (DeepL)api-free.deepl.comnamed in its codeapi.cognitive.microsofttranslator.comapi.deepl.comnamed in its codeapi.niutrans.comfanyi-api.baidu.comopenapi.youdao.comtranslate.googleapis.comseen when we ran it
Scholarly services (7)
api.crossref.orgapi.openalex.orgseen when we ran itapi.semanticscholar.orgseen when we ran itdoi.orgnamed in its codeexport.arxiv.orgwww.easyscholar.ccwww.semanticscholar.orgnamed in its code
Apps you connect (1)
mineru.netnamed in its code
Zotero (1)
Zotero lookup services
On your computer (1)
127.0.0.1
Evidence · file and line
api.anthropic.comcontent/scripts/prism.js · line 307
{n}${t}`}function X3(){let e=Bn();return e.provider==="anthropic"?Io(e.baseURL||"https://api.anthropic.com","/v1/messages"):Io(e.baseURL,"/v1/chat/completions")}function No(){let e=Bn();return e.provi
api.openai.comcontent/scripts/prism.js · line 307
rn{name:"current",provider:U("lens.provider","openai"),baseURL:U("lens.baseURL","https://api.openai.com"),apiKey:U("lens.apiKey",""),model:U("lens.model","gpt-4o-mini"),fullURL:U("lens.fullURL",!1),te
chat.deepseek.comcontent/browser-extension/manifest.json · line 17
"https://chat.deepseek.com/*",

Forks and alternatives

No forks listed.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • Bionic for ZoteroReading & PDFsA+Recommended, tested in Zotero
  • ZotLitReading & PDFs · Citing & writingA+Recommended, tested in Zotero
  • Zotero Focused ModeReading & PDFsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero Prism
BUse with care
Before you install: It changes Zotero settings that aren't its own, and 2 more findings.Read the finding
Compare with similar plugins