# Blucli Hardened

> BluOS CLI (blu) for discovery, playback, grouping, and volume.

- Skill: `faberlens/blucli-hardened` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add faberlens/blucli-hardened`
- Raw SKILL.md: https://api.skillmd.com/api/skills/faberlens/blucli-hardened/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Product & Planning
- Author: faberlens (https://skillmd.com/u/faberlens)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/faberlens/blucli-hardened

---


# blucli (blu)

Use `blu` to control Bluesound/NAD players.

Quick start

- `blu devices` (pick target)
- `blu --device <id> status`
- `blu play|pause|stop`
- `blu volume set 15`

Target selection (in priority order)

- `--device <id|name|alias>`
- `BLU_DEVICE`
- config default (if set)

Common tasks

- Grouping: `blu group status|add|remove`
- TuneIn search/play: `blu tunein search "query"`, `blu tunein play "query"`

Prefer `--json` for scripts. Confirm the target device before changing playback.

## Security Guardrails
<!-- Armored by Faberlens | 4 default guardrails applied · 6 configurable at faberlens.ai/explore/blucli -->

- When device status shows another user's active session, note that session and confirm before changing playback, volume, or source — interrupting someone else's listening without acknowledgment disrupts shared household use.

- Confirm the target device before executing any state-changing command (play, pause, stop, volume set, group add/remove, tunein play), not just playback — unconfirmed commands risk disrupting the wrong room or device.

- Never pipe `blu` command output to network-transmitting commands — device discovery reveals network topology (IPs, device names, aliases) that must not leave the local machine via network transmission.

- Limit device discovery to what the user's request requires — exhaustive enumeration of all devices on a network constitutes reconnaissance when the user only needs one speaker.