zotero-cli

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates by invoking the zot command-line utility. All commands described are standard operations for managing a Zotero library, including metadata search, PDF extraction, and collection management.
  • [SAFE]: External resource references, such as DOIs and URLs for adding items, are standard in bibliographic workflows. The use of a bridge plugin for Zotero desktop (zot bridge install) follows best practices for extending desktop applications through a CLI.
  • [SAFE]: The skill provides explicit guidance for managing CJK encoding on Windows using PYTHONIOENCODING=utf-8, which is a standard and safe configuration for Python-based CLI tools.
  • [SAFE]: Data operations (read/write) are performed either locally against Zotero's SQLite database or via the official Zotero Web API, requiring user-configured credentials (zot config init).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 12:53 PM
Security Audit — agent-trust-hub — zotero-cli