If I am not mistaken, Claude sometimes pulls an API key out of a .env file and drops it into that folder. It might be neat for you to add a feautre specifically for identifying any keys that are in that folder.

i had the same experience with vector db and ditched them. i like no database approach. do you add something to agents.md or claude.md so that claude code know how to use this tool?