goodreads-book-author-and-listopia-list-scraper
Look up Goodreads books by URL, search query, or ISBN, or pull every book by an author, in a series, on a Listopia list, shelf, or genre page. Filter by rating, ratings count, publish year, language, genre, or author. Output fields: title, primaryAuthor, averageRating, ratingsCount, publishedYear...
Install this skill
or
78/100
Security score
The goodreads-book-author-and-listopia-list-scraper skill was audited on Nov 11, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 100
Command substitution pattern
SourceSKILL.md
| 98 | |
| 99 | ```bash |
| 100 | RUN=$(curl -s -X POST "https://api.apify.com/v2/acts/dataspryva~goodreads-book-author-and-listopia-list-scraper/runs" \ |
| 101 | -H "Authorization: Bearer $APIFY_TOKEN" -H "Content-Type: application/json" \ |
| 102 | -d @references/example-input.json) |
low line 103
Command substitution pattern
SourceSKILL.md
| 101 | -H "Authorization: Bearer $APIFY_TOKEN" -H "Content-Type: application/json" \ |
| 102 | -d @references/example-input.json) |
| 103 | RUN_ID=$(echo "$RUN" | jq -r '.data.id'); DATASET=$(echo "$RUN" | jq -r '.data.defaultDatasetId') |
| 104 | curl -s "https://api.apify.com/v2/actor-runs/$RUN_ID?waitForFinish=60" -H "Authorization: Bearer $APIFY_TOKEN" | jq -r '.data.status' |
| 105 | curl -s "https://api.apify.com/v2/datasets/$DATASET/items?format=json" -H "Authorization: Bearer $APIFY_TOKEN" > output.json |
medium line 89
Curl to non-GitHub URL
SourceSKILL.md
| 87 | |
| 88 | ```bash |
| 89 | curl -s -X POST "https://api.apify.com/v2/acts/dataspryva~goodreads-book-author-and-listopia-list-scraper/run-sync-get-dataset-items" \ |
| 90 | -H "Authorization: Bearer $APIFY_TOKEN" \ |
| 91 | -H "Content-Type: application/json" \ |
medium line 100
Curl to non-GitHub URL
SourceSKILL.md
| 98 | |
| 99 | ```bash |
| 100 | RUN=$(curl -s -X POST "https://api.apify.com/v2/acts/dataspryva~goodreads-book-author-and-listopia-list-scraper/runs" \ |
| 101 | -H "Authorization: Bearer $APIFY_TOKEN" -H "Content-Type: application/json" \ |
| 102 | -d @references/example-input.json) |
medium line 104
Curl to non-GitHub URL
SourceSKILL.md
| 102 | -d @references/example-input.json) |
| 103 | RUN_ID=$(echo "$RUN" | jq -r '.data.id'); DATASET=$(echo "$RUN" | jq -r '.data.defaultDatasetId') |
| 104 | curl -s "https://api.apify.com/v2/actor-runs/$RUN_ID?waitForFinish=60" -H "Authorization: Bearer $APIFY_TOKEN" | jq -r '.data.status' |
| 105 | curl -s "https://api.apify.com/v2/datasets/$DATASET/items?format=json" -H "Authorization: Bearer $APIFY_TOKEN" > output.json |
| 106 | ``` |
medium line 105
Curl to non-GitHub URL
SourceSKILL.md
| 103 | RUN_ID=$(echo "$RUN" | jq -r '.data.id'); DATASET=$(echo "$RUN" | jq -r '.data.defaultDatasetId') |
| 104 | curl -s "https://api.apify.com/v2/actor-runs/$RUN_ID?waitForFinish=60" -H "Authorization: Bearer $APIFY_TOKEN" | jq -r '.data.status' |
| 105 | curl -s "https://api.apify.com/v2/datasets/$DATASET/items?format=json" -H "Authorization: Bearer $APIFY_TOKEN" > output.json |
| 106 | ``` |
| 107 |
Scanned on Nov 11, 2026
View Security Dashboard