Tool-Output Injection: The Attack Vector Nobody's Testing For

A narrower, more concrete injection vector than the usual prompt-injection framing — and one most red-team methodology misses.