Surely this is done on-device right? Or is the prompt asking the LLM if there are secrets in the changes.
Arguably I trust Github / Gitlab / etc more than OpenAI / Anthropic / etc
Example:
  feat(auth): add OAuth2 integration with GitHub and Google
  - Implement OAuth2 authentication flow
  - Add provider configuration for GitHub and Google
  - Create callback handler for token exchange
  - Update login UI with social auth buttons
You can try it out with uvx (no install):
  uvx gac init  # config wizard
  uvx gac
Tech details:
14 providers - Supports local (Ollama & LM Studio) and cloud (OpenAI, Anthropic, Gemini, OpenRouter, Groq, Cerebras, Chutes, Fireworks, StreamLake, Synthetic, Together AI, & Z.ai (including their extremely cheap coding plans!)).
Three verbosity modes - Standard with bullets (default), one-liners (`-o`), or verbose (`-v`) with detailed Motivation/Architecture/Impact sections.
Secret detection - Scans for API keys, tokens, and credentials before committing. Has caught my API keys on a new project when I hadn't yet gitignored .env.
Flags - Automate common workflows:
  `gac -h "bug fix"` - pass hints to guide intent
  `gac -yo` - auto-accept the commit message in one-liner mode
  `gac -ayp` - stage all files, auto-accept the commit message, and push (yolo mode)
GitHub: https://github.com/cellwebb/gac
Surely this is done on-device right? Or is the prompt asking the LLM if there are secrets in the changes.
Arguably I trust Github / Gitlab / etc more than OpenAI / Anthropic / etc