Disable ForwardAgent for all not specific host

Using ForwardAgent within a specific host is more secure than
activating it globally. It is recommended that you always apply agent
forwarding only to servers you trust to minimize security risks.

home/.ssh/config

@@ -62,3 +62,12 @@ Host *
 # repository, files that are used for personal purposes and files that are used
 # for work.
 Include config.d/*.conf
+
+# Specifies whether the connection to the authentication agent will be
+# forwarded to the remote machine.
+#
+# This is turned off here, for increased security.
+# If need to use ForwardAgent, enable it for each host separately.
+#
+# Default is "no"
+ForwardAgent no