Is SkyDM - Bluesky DM Bot & Bulk Message Sender safe?
SkyDM reads a Bluesky post's replies, quotes, reposts, and likes to build a bulk outreach list, then sends automated DMs from the user's own account.
Using the access token the Bluesky web app already stores in the page's own local storage, SkyDM calls the user's Bluesky PDS directly to collect handles and DIDs from a chosen post's engagers (or an account's followers/following) and saves them as a target list in the extension's local storage. It then works through that list on a configurable, randomized delay, opening a direct-message conversation with each target and sending a message built from a user-authored template.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed SkyDM - Bluesky DM Bot & Bulk Message Sender contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- bsky.social (the user's own Bluesky PDS)
SkyDM - Bluesky DM Bot & Bulk Message Sender sends data to bsky.social (the user's own Bluesky PDS). Named as a recipient in this extension's own analysis.