Downloads a .xpi file (0.7 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
7
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
274
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
NOASSERTION
B
Atlas gradeUse with care
A+ABBC
because a zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 2 more findings
Next rung: A, once every finding in the code comes out low.
Applies to v0.5.0, released 23 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify9 addresses in 6 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (2)
Codex CLI (OpenAI)api.openai.com
Scholarly services (3)
api.crossref.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openalex.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.doi.org
Zotero (1)
Zotero lookup services
Code hosting (1)
api.github.comseen when we ran itIt contacted this address when we ran it in Zotero.
Content delivery (1)
models.dev
On your computer (1)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
api.openai.comcontent/scripts/confucius.js · line 78450
api.github.comcontent/scripts/confucius.js · line 69744
var RELEASES_URL = `https://api.github.com/repos/${REPOSITORY}/releases?per_page=100`;
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 8 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.Updates itself outside Zotero's updaterlowLow concern.Other programs on this computer can change your library through itlowLow concern.Lets programs on this computer connect through Zotero's built-in server
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/confucius.js · line 7007
Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.
What you'll need
Detected automatically
An API key for some featuresWorks without one: Native runtime with a local Ollama endpoint (usually no key). Needs a key (OpenAlex and OpenAI or other OpenAI-compatible provider): OpenAlex literature search needs an OpenAlex API key; OpenAI-compatible endpoints need an API key.
Or: a model on your own computerIt can use a local model such as Ollama
Where your data goes
We found: only contacts services we could identify. 9 addresses in 6 groups.
AI services (2)
Codex CLI (OpenAI)api.openai.com
Scholarly services (3)
api.crossref.orgnamed in its codeapi.openalex.orgnamed in its codedoi.org
Zotero (1)
Zotero lookup services
Code hosting (1)
api.github.comseen when we ran it
Content delivery (1)
models.dev
On your computer (1)
127.0.0.1named in its code
Evidence · file and line
api.openai.comcontent/scripts/confucius.js · line 78450