Pre-registered research on prompt injection through agent tool output, plus a dependency…