adk-docs-ext

The `gemini-extension.json` configures the `mcpdoc` server with `--allowed-domains "*"`. This allows the server to fetch documentation from any domain specified in the `llms.txt` file or via the tool's methods. While the default `llms.txt` is from a trusted Google source, this broad permission creates a potential Server-Side Request Forgery (SSRF) vulnerability if the `llms.txt` source is compromised or a user configures a malicious `llms.txt`. The `GEMINI.md` also instructs the model to use `curl` for off-site content, which if not properly sandboxed by the Gemini CLI, could lead to arbitrary command execution for network requests.