aye, it's pretty easy to ptrace() ssh-agent and extract the key directly from memory. once malicious third party code has executed on your machine as you it's

aye, it's pretty easy to ptrace() ssh-agent and extract the key directly from memory. once malicious third party code has executed on your machine as you it's game over.