Open-Source Prompt Injection Detectors Struggle with Agentic Tool Outputs | HACKOBAR_