· aka: Tool-Mediated Injection
Malicious content in tool output is interpreted by the agent as new instructions, creating an indirect injection vector.
Any tool returning external content becomes an injection vector.
Agent that processes tool outputs without sanitisation.