vlt 1.5.0 Adds Agent Skills Management

vlt 1.5.0 introduces a skills-management feature that lets JavaScript developers discover coding-agent instructions bundled with installed dependencies and link selected skills into agent-readable directories such as .agents/skills or .claude/skills. Skills, defined as folders containing SKILL.md instruction files, are tied to the exact dependency versions recorded in a project’s lockfile, allowing links to update automatically when packages change and enabling consistent setup through saved allow-skills settings in vlt.json and vlt ci. Linking remains opt-in, and vlt uses Socket security data to exclude packages identified as malware by default while allowing teams to create stricter filters for risks including typosquatting, vulnerabilities, and obfuscated code. The release expands vlt’s package-management security model, which separates dependency installation from execution of install scripts, and follows similar agent-skill support recently added to pnpm, reflecting a broader shift toward managing AI-agent instructions as part of dependency security and maintenance.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.