A new attack paradigm for skill poisoning in LLM agents decouples pretext from actuation, allowing malicious actuation to hide in plain sight. This increases the attack surface and exposes a blind spot in isolated skill security audits.