Pretext: Defeating Malicious Skill Detection Frameworks for AI Agents (Submitted 30 Sep 2026) 1. Oktober 2026