gemini-agent

The server relies heavily on `subprocess.run` to execute external `gemini` CLI commands. Several endpoints, specifically for MCP server management (add/remove) and session deletion, directly pass user-controlled strings (e.g., MCP server name, URL, arguments, session ID) into these `subprocess.run` calls without explicit input sanitization in the Python code. This introduces a potential for command injection if the underlying `gemini` CLI does not robustly sanitize all its arguments against shell exploits, or if a malicious input could escape its intended interpretation. The main task submission also passes the `prompt` directly.