they are "literally the strings" but I believe they will be escaped, or encoded differently, if a user tries to inject them as part of a prompt.