Zotero Plugins Atlas
Plugins

Zotero Copy Anything

by shjdgwj · github.com/shjdgwj/zotero-copy-anything

Zotero Copy Anything

View source
Downloads a .xpi file (1.4 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
2
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because it downloads a program and runs it, and 3 more findings
Applies to v1.0.9, released 18 Sep 2026Code checked · not yet tested in a live Zotero
Fork of windfollowingheart/zotero-copy-anythingA copy of another listed plugin, changed by someone else.
Another plugin uses the same ID2 other plugins share this add-on ID. Zotero can only install one of them.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the shjdgwj account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify2 addresses in 2 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
Code hosting (1)
gitee.com
On your computer (1)
localhost
Where we found it
gitee.comcontent/scripts/zoterocopyanything.js · line 3691
downloadUrl = "https://gitee.com/windheartyolo/zotero-copy-anything/releases/download/binary/copyfiles.exe";
Powerful capabilitiesDownloads a program and runs it, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Downloads a program and runs itmediumMedium concern: worth reading before you install.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Works with files on your computerlowLow concern.
Where we found it
Downloads a program and runs itcontent/scripts/zoterocopyanything.js · line 3712

On first start it downloads a small helper program from the original developer's gitee.com page, then runs it when you copy attachments. The README says so, but the file isn't checked, and we can't read the program itself.

const response = await fetch(downloadUrl);
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zoterocopyanything.js · line 140

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/zoterocopyanything.js · line 96

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Launches programs on your computercontent/scripts/zoterocopyanything.js · line 3660

Programs it names include chmod

await Zotero.Utilities.Internal.exec(
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10, 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✓ works
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 18 Sep 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: only contacts services we could identify. 2 addresses in 2 groups.

Code hosting (1)
gitee.com
On your computer (1)
localhost
Evidence · file and line
gitee.comcontent/scripts/zoterocopyanything.js · line 3691
downloadUrl = "https://gitee.com/windheartyolo/zotero-copy-anything/releases/download/binary/copyfiles.exe";

Forks and alternatives

Fork of windfollowingheart/zotero-copy-anything.

2 other plugins use the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 3 plugins carry the same one, because people copied Zotero Copy Anything to make their own versions and kept its ID.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.
Zotero Copy Anything · this pluginshjdgwj/zotero-copy-anythingBUse with care218 Sep 2026
Zotero Copy AnythingThe most used · windfollowingheart/zotero-copy-anythingBUse with care2,69718 Sep 2026
See all 3 and how they differ →

No forks listed.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero Copy Anything
BUse with care
Before you install: It downloads a program and runs it, and 3 more findings.Read the finding