A benchmark for evaluating prompt injection attacks in agentic tool-use pipelines