Prompt Injection Through Tool Output Is Two Events (Your Screens Read One)