vlt 1.5.0 links agent skills from your dependencies to coding agents, with versions pinned by your lockfile.

The default skills filter uses Socket data to exclude packages flagged as malware before their instructions reach your agents.

https://socket.dev/blog/vlt-skills @vltpkg