Zotero Spotlight

by Royshare · github.com/Royshare/zotero-spotlight

A global-ish command that opens a Quick Launch bar in Zotero.

Downloads a .xpi file (0.08 MB). In Zotero, open Tools → Plugins and install it from the file.

Stars: 55
Downloads: 3,868
Contributors: 5
Licence: AGPL-3.0

Atlas gradeUse with care

A+ABBC

because a zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 1 more finding

Next rung: A, once every finding in the code comes out low.

Applies to v0.6.1, released 20 Aug 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026

Another plugin uses the same IDOne other plugin shares this add-on ID. Zotero can only install one of them.

What we found in the codeSets the grade

Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.Low

Updates

Updates come from this project's GitHub repositoryThe update address offers this version

Where your data goesNo web requests foundLow

No further detail for this area yet.

Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 3 moreMedium

A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumA zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumUses the clipboardlowWorks with files on your computerlow

Where we found it

A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zotero-spotlight.js · line 129

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;

A zotero:// link can make it run code if you approve a promptcontent/scripts/zotero-spotlight.js · line 85

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;

Before you installShown, not graded

Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically

Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work

What you'll needNothing extra detectedDetected automatically from its code

No further detail for this area yet.

MaintenanceActive · last release 20 Aug 20265 contributors

No further detail for this area yet.

LanguagesDocumentation in EnglishInterface: English and Chinese

No further detail for this area yet.

We report what we found in the code. Open any area for the evidence.How we grade Report a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: no web requests found.

Forks and alternatives

1 other plugin uses the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 2 plugins carry the same one, because people copied Zotero Spotlight to make their own versions and kept its ID.Show what this means

You can only have one. Zotero sees them as the same plugin.
Installing another replaces it. If you install one of the others, it takes this one's place.
Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.

Zotero Spotlight · this pluginRoyshare/zotero-spotlightBUse with care3,86820 Aug 2026

See all 2 and how they differ →

1 listed fork.

Plugins for the same job

Google Scholar Citation CountCiting & writing · Import & metadataA+Recommended, tested in Zotero
DOI FixImport & metadataA+Recommended, tested in Zotero
Add Items from TextAI & summaries · Import & metadataA+Recommended, tested in Zotero
PDFerret for ZoteroReading & PDFs · Import & metadata · Files, sync & backupA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer