You should only use agent forwarding in machines you trust. Otherwise the root account in that machine can pose as you.
Last updated 3 years ago