dunking-anonymously

Renders a Bluesky post as an anonymised screenshot, so the words can be quoted
without the handle. A quote-post delivers your whole audience to the original
author; for an account with forty followers that is a pile-on whatever your
caption said.

Idea from Luis Villa, who
built the same feature for himself. His render greys the identity out; this one
blacks it out, declassified-document styling.

Usage

python3 scripts/dunk.py https://bsky.app/profile/someone.bsky.social/post/3mv6...
python3 scripts/dunk.py at://did:plc:xxxx/app.bsky.feed.post/3mv6... --stamp
python3 scripts/dunk.py someone.bsky.social/3mv6... --redact "my town" --show-date

Writes <rkey>.png to the working directory, prints the alt text to stdout, and
writes <rkey>.json holding the source URI for your own records. The source URI
stays out of both the image and the alt text.

Redactions applied

Avatar, display name and handle become black bars. Every at-mention facet in the
body is blacked out, since a mention is a second person's handle and a strong
search key for finding the original. Embedded images, video, link cards and
quoted posts render as [image not shown] and friends rather than being
fetched, because an embedded image can carry a face, a location or a watermark.
Engagement counts are dropped, and the date is dropped unless --show-date —
a date plus one distinctive sentence narrows a search to a single post.

It cannot redact identity out of the post's own words. Bluesky indexes full post
text, so a post naming its author's employer, town or cat stays traceable by
anyone who pastes a sentence into search. --redact is the only defence, and it
is manual, which is why reading the rendered PNG is part of the procedure rather
than a nicety.

Network

Unauthenticated. It needs no token and leaves nothing in anyone's notifications.

• public.api.bsky.app — app.bsky.feed.getPostThread, tried first
• api.bsky.app — same lexicon, used when the first host answers 403

The fallback exists because public.api.bsky.app returns 403 from some proxied
environments while api.bsky.app answers normally. Both returned 200 from the
Claude.ai container on 2026-09-10. A User-Agent header is sent on every
request; some AppView deployments refuse urllib's default.

The script never fetches cdn.bsky.app, so no image blob of the original
account is retrieved.

Dependencies

Pillow and the standard library. DejaVu Sans Mono at
/usr/share/fonts/truetype/dejavu, which ships with the container.

pip install --break-system-packages pillow   # only if Pillow is absent

Scope

Quote-post public figures and large accounts normally — anonymising a senator
removes the reader's ability to check the source while protecting nobody. See
the When NOT to use section of SKILL.md for the routing table, the
earned exceptions, and the condition for abandoning a render mid-run.

Skill folder: dunking-anonymously

Release of dunking-anonymously version 0.1.1

📥 Download & Install

⬇️ Download dunking-anonymously.zip

To install:

1. Click the download link above (ignore the "Source code" archives below - they're auto-generated by GitHub)
2. Go to Claude.ai Skills Settings
3. Upload the downloaded ZIP file
4. Requires paid Claude Pro or Team account

See official documentation for more details.

Recent Changes

8300d1b dunking-anonymously: README, example asset, AppView host fallback (#795)
15b2491 docs: Update CHANGELOG.md for released skills