Palaia
ReviewAudited by ClawScan on May 13, 2026.
Overview
Palaia is a coherent local memory skill, but it tells the agent to run silent health checks and fixes automatically and to persist conversation memories across sessions and agents.
Install only if you want a persistent memory system. Before enabling auto-capture, decide what conversations may be stored, prefer private scope for sensitive work, and require approval before the agent runs `palaia doctor --fix`, upgrades packages, installs plugins, or changes configuration.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may change local Palaia/OpenClaw setup or memory-store state as part of an automatic health check rather than waiting for explicit approval.
This directs the agent to invoke a local command every time the skill loads and to apply fixes automatically, without normal user review.
Before doing anything else with palaia, run `palaia doctor` silently. If it reports ANY warnings, address them immediately by following `palaia doctor --fix` recommendations.
Require the agent to show the `palaia doctor` result and ask before running any `--fix`, install, migration, or configuration-changing command.
Sensitive or incorrect conversation details could be stored, reused in future sessions, or made available to other workspace agents by default.
The skill persists conversation-derived memory and makes the default scope readable by all agents in the workspace, but the visible artifact does not clearly define retention, exclusions, opt-out, or per-conversation approval.
Conversations are automatically captured when the OpenClaw plugin is active. ... team — All agents in the workspace can read it (default)
Use private scope for sensitive work, review stored memories periodically, and configure clear capture/retention rules before enabling auto-capture.
Installing or updating could execute code from external package repositories, and future package changes may affect behavior.
The skill relies on installing external Python and OpenClaw plugin packages; this is expected for the product, but the visible artifact does not pin versions and the registry lists the source as unknown.
pip install "palaia[fastembed]" ... openclaw plugins install @byte5ai/palaia
Install from trusted package sources, verify the publisher/package names, and consider pinning versions in controlled environments.