Downloads a .xpi file (0.10 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
19
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
1,804
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
A+ABCC
because it writes to Zotero's database directly
Next rung: B, once nothing in the code is a serious concern.
Applies to v1.2.3, released 29 Aug 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesNo web requests foundLowLow concern: normal for plugins that do this job. Listed so you know.
No further detail for this area yet.
Powerful capabilitiesWrites to Zotero's database directly, and 5 moreHighHigh concern: a serious problem. One high finding makes the grade C.
Writes to Zotero's database directlyhighHigh concern: a serious problem.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Works with files on your computerlowLow concern.Installs other add-onslowLow concern.Uses Zotero's password managerlowLow concern.
Where we found it
Writes to Zotero's database directlycontent/scripts/settingsync.js · line 4008
Tables: settings
await Zotero.DB.queryAsync(
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/settingsync.js · line 129