All I would have to do is run the same tool over the text, see it gets flagged, and then modify the text until it no longer gets flagged. That's assuming I can't just prompt inject my way out of the scenario.
"All I have to do is modify my virus until the anti-virus doesn't detect it."