bedrock-agentcore-starter-toolkit agent import generates Python source with crafted config values without safe literal encoding, enabling code injection when the imported agent is run or deployed. Affects 0.1.4-0.3.13 and requires an authenticated same-account actor plus user import/run actions. Upgrade to 0.3.14 and re-import affected agents, replacing local/deployed artifacts to mitigate.