HN Post Flags ChatGPT Desktop Forwarding SSH Agent to Codex

'ChatGPT Desktop forwards your SSH agent to remote machines.' That is the whole claim of a short Hacker News submission by user DenGorbachev. A Codex agent running on that remote host, the post says, can then authenticate using your local SSH credentials, and 'can push to your private repos on GitHub, for example.' The cited proof is a comment on openai/codex pull request #28131.

That PR, titled '[codex] Refresh SSH agent for app-server proxy,' was opened by abhinav-oai. It is closed, not merged. Commenter yfontana called that out in the thread, writing the referenced PR 'was closed and not merged,' which tempers the 'proof' framing without rebutting the underlying behavior.

Commenters focused less on forensics than on design. 'Auto-forwarding your agent to foreign machines is not the right balance' without per-signature approval, wrote arghwhat. The post drew 72 points and 16 comments, modest by Hacker News standards and so far not picked up by any security outlet. It surfaces one week after Apiiro reported that Claude Code's 'Don't Ask Again' permission default had leaked keys across repositories, the second coding-agent credential story in a week.