VSCode’s SSH Agent Is Bananas
Summary
The article examines VSCode’s SSH agent integration and its security implications, describing how an integrated agent can operate via port-forwarded SSH, spawn shells, and persist on a remote host. It discusses the risk of LLM-driven code iteration in development environments, compares it to Emacs Tramp, and argues for caution when used in production, highlighting potential attack surfaces and boundary concerns.