Researchers bypass AI agent protections with JavaScript obfuscation SC Media