Warning: Do not give third party apps the "create and edit gists" scope, if you have any private data in private gists.
me:
when I grant that privilege to a 3rd party app over oauth, not the web interface.
Create makes sense, they can create them on my behalf. But edit is much more ambiguous. Can that app edit the ones it creates itself? Or any gist I have? Or just the public ones?