Plugins / AI & summaries

Zotero Copilot

by BaiRuic · github.com/BaiRuic/ZoteroCopilot

Copilot For Zotero (now BibGenie) || Your Intelligent AI Assistant for Zotero

View source
Downloads a .xpi file (4.7 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
4
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
566
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
None stated
B
Atlas gradeUse with care
because it contacts a server we couldn't identify: ollama.com, and 2 more findings
Applies to v0.1.3, released 8 Nov 2025Code checked · not yet tested in a live Zotero
Doesn't work with the current Zotero (10)Works with Zotero 7, 8.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the BaiRuic account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address doesn't list this add-on, so Zotero won't update it
Where your data goesContacts a server we couldn't identify: ollama.com14 addresses in 5 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Developer's servers (1)
www.zotero-copilot.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Not identified (1)
ollama.com
AI services (10)
ai-gateway.vercel.shnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.anthropic.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.groq.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.siliconflow.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.x.aigenerativelanguage.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.open.bigmodel.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Code hosting (1)
github.com
On your computer (1)
localhostnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
ollama.comcontent/scripts/zotero-copilot.js · line 81364
const response = await post(this.fetch, `https://ollama.com/api/web_search`, { ...request }, {
api.x.aicontent/scripts/zotero-copilot.js · line 67663
apiHost: "https://api.x.ai/v1",
github.comcontent/scripts/zotero-copilot.js · line 728
"This browser does not have a MessageChannel implementation, so enqueuing tasks via await act(async () => ...) will fail. Please file an issue at https://github.com/facebook/react/is
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 2 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Stores API keys or passwordslowLow concern.
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zotero-copilot.js · line 304106

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/zotero-copilot.js · line 304062

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8 · not 9, 10, 11 betaDoesn't work with the current Zotero (10)MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✗ doesn't workZotero 10 ✗ doesn't workZotero 11 beta ✗ doesn't work
What you'll needOr: a model on your own computerDetected automatically from its code
No further detail for this area yet.
MaintenanceSlowing down · last release 8 Nov 20251 contributor
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • Or: a model on your own computerIt can use a local model such as Ollama
  • Zotero 7, 8Not working with Zotero 10

Where your data goes

We found: contacts a server we couldn't identify: ollama.com. 14 addresses in 5 groups.

Developer's servers (1)
www.zotero-copilot.comnamed in its code
Not identified (1)
ollama.com
AI services (10)
ai-gateway.vercel.shnamed in its codeapi.anthropic.comnamed in its codeapi.deepseek.comnamed in its codeapi.groq.comnamed in its codeapi.openai.comnamed in its codeapi.siliconflow.cnnamed in its codeapi.x.aigenerativelanguage.googleapis.comnamed in its codeopen.bigmodel.cnnamed in its codeopenrouter.ainamed in its code
Code hosting (1)
github.com
On your computer (1)
localhostnamed in its code
Evidence · file and line
ollama.comcontent/scripts/zotero-copilot.js · line 81364
const response = await post(this.fetch, `https://ollama.com/api/web_search`, { ...request }, {
api.x.aicontent/scripts/zotero-copilot.js · line 67663
apiHost: "https://api.x.ai/v1",
github.comcontent/scripts/zotero-copilot.js · line 728
"This browser does not have a MessageChannel implementation, so enqueuing tasks via await act(async () => ...) will fail. Please file an issue at https://github.com/facebook/react/is

Forks and alternatives

No forks listed.

Plugins for the same job
  • Add Items from TextAI & summaries · Import & metadataA+Recommended, tested in Zotero
  • MkteroReading & PDFs · Citing & writing · AI & summariesA+Recommended, tested in Zotero
  • Zotero 阅读模式沉浸式双语Reading & PDFs · Translation · AI & summariesA+Recommended, tested in Zotero
  • Zotero 标题翻译Reading & PDFs · Translation · Organising & tags · AI & summariesA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero Copilot
BUse with care
Before you install: It contacts a server we couldn't identify: ollama.com, and 2 more findings.Read the finding
Compare with similar plugins