gh-fine-grained-pat — declarative fine-grained PAT forge

GitHub exposes no API to create fine-grained PATs (community #148626) — the web UI is the only way. This skill drives that UI over the Chrome DevTools Protocol from a declarative JSON spec, so token creation is repeatable, reviewable, and anti-fragile instead of a hand-clicked one-off.

Self-Evolving Skill: This skill improves through use. GitHub's settings UI drifts — if a selector misses, the modal/picker/permission flow changed, or a permission's detail-page noun is wrong, fix scripts/, CLAUDE.md (selector map + noun map), or the spec immediately; don't defer. Only update for real, reproducible breakage.

When to use

• Mint a scoped token (release bot, CI reporter, read-only auditor, account-scoped) for storage in the SCS vault.
• Re-create / rotate a token from a checked-in spec.
• List, verify (read back settings), or revoke fine-grained tokens.

Prerequisites

• node (NOT bun — Bun's connectOverCDP times out) and playwright-core (already pinned at the repo root package.json).
• Google Chrome at the standard macOS path.
• A one-time GitHub login (persisted in a profile; see below).

One-time login (then fully automated)