{"data":{"id":"21fcd3c2-1ab7-4913-a409-10ba0879d908","title":"vlt 1.5.0 Adds Agent Skills Management","summary":"vlt 1.5.0 adds a `vlt skills` command that discovers agent skills in installed dependencies and links them into directories coding agents read, such as `.agents/skills`. The skills come from the package version recorded in the project's lockfile, and the links update as dependencies change. The release also lets developers exclude skills from packages flagged as malware using Socket security data.","solution":"N/A -- no mitigation discussed in source.","labels":["industry","security"],"sourceUrl":"https://socket.dev/blog/vlt-skills?utm_medium=feed","publishedAt":"2026-10-21T02:27:15.112Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vlt","Socket","Codex","Cursor","GitHub Copilot","Gemini CLI","Claude"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T02:27:15.112Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}