Trace Indirect Prompt Injection Paths