Downloads a .xpi file (0.4 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
2
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
20
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
A+ABBC
because it signs in using another app's identity, and 3 more findings
Next rung: A, once every finding in the code comes out low.
Applies to v1.4.8, released 24 Aug 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
文
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address is broken (nothing is there), so Zotero can't update it
Where your data goesOnly contacts services we could identify2 addresses in 1 group.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (2)
auth.openai.comchatgpt.com
Where we found it
auth.openai.comchrome/content/scripts/papertranslateforzotero.js · line 7320
var CODEX_REFRESH_TOKEN_URL = "https://auth.openai.com/oauth/token";
chatgpt.comchrome/content/scripts/papertranslateforzotero.js · line 7319
var DEFAULT_CODEX_API_URL = "https://chatgpt.com/backend-api/codex/responses";
Powerful capabilitiesSigns in using another app's identity, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Signs in using another app's identitymediumMedium concern: worth reading before you install.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Reuses a sign-in you saved in another programmediumMedium concern: worth reading before you install.Works with files on your computerlowLow concern.
Where we found it
Signs in using another app's identitychrome/content/scripts/papertranslateforzotero.js · line 7321
Signs in as Codex CLI
var CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
A zotero:// link (a web page can open one) can make it install add-o…chrome/content/scripts/papertranslateforzotero.js · line 135
Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.
What you'll need
Detected automatically
An API keyNeeds a key you get from the service (OpenAI (Codex sign-in) and OpenAI-compatible API provider). What needs it: Sign-in to OpenAI via Codex CLI (codex login), or an API key for an OpenAI-compatible service.
Where your data goes
We found: only contacts services we could identify. 2 addresses in 1 group.
AI services (2)
auth.openai.comchatgpt.com
Evidence · file and line
auth.openai.comchrome/content/scripts/papertranslateforzotero.js · line 7320
var CODEX_REFRESH_TOKEN_URL = "https://auth.openai.com/oauth/token";
chatgpt.comchrome/content/scripts/papertranslateforzotero.js · line 7319
var DEFAULT_CODEX_API_URL = "https://chatgpt.com/backend-api/codex/responses";
Forks and alternatives
No forks listed.
Plugins for the same job
zotxtCiting & writingA+Recommended, tested in Zotero