Vulnerable code sample

import os

def generate_agent_code(collaboration_instruction: str) -> str:
    """
    Generates the Python code for an agent's handler function.

    This function simulates the vulnerable behavior by directly embedding a user-provided
    string into a Python code template without proper sanitization of triple-quotes.
    """
    
    # The vulnerability is the direct, unsanitized injection of 'collaboration_instruction'
    # into the f-string, which is then placed inside a triple-quoted string.
    code_template = f"""
# Autogenerated Agent Handler
import sys
import os

def handler(event, context):
    \"\"\"
    This is the main handler for the agent.
    It follows the collaboration instruction provided.
    \"\"\"

    # The instruction from the collaborator
    instruction = \"\"\"{collaboration_instruction}\"\"\"

    print("--- Executing Agent ---")
    print(f"Instruction: {{instruction}}")
    
    # Placeholder for the agent's core logic
    print("--- Agent Execution Complete ---")

    return {{
        'status': 'success'
    }}
"""
    return code_template