ChatGPT Desktop is reportedly forwarding users' SSH agents to remote machines as a convenience feature, prompting criticism that it removes important security friction. Commenters argue auto-forwarding should require per-request approval or filtering, and recommend hardware-backed keys such as Secure Enclave or YubiKey with fingerprint or touch confirmation. The discussion also highlights broader concerns that local agent guardrails rely on leaky blacklists and broad permissions.