hooks.py logs full hook event data (including tool_input, which may contain
file contents or command arguments) to .claude/hooks/logs/hooks-log.jsonl.
This log file was not excluded from git, creating a risk of accidentally
committing sensitive data such as file contents passed to Write/Edit tools
or command arguments passed to Bash.
Added .claude/hooks/logs/ to .gitignore to prevent accidental commits.
Co-Authored-By: Claude Code <noreply@anthropic.com>
Agents that verify UI changes in a browser via Playwright MCP drop a
`.playwright-mcp/` cache directory and `*-check.png` screenshots in the
repo root. These are session-scoped verification residue, not deliverables.