Pallio AI

Chat with Pallio AI knowledge-base personas. Ask questions against curated document collections with RAG-powered citations.

Security Scan

The skill's declared purpose (chatting with Pallio personas) matches its runtime instructions and required environment variable; it only uses Pallio public widget endpoints and requests a single persona ID.

Purpose & Capability

Name/description ask to chat with Pallio personas and the skill only requires PALLIO_PERSONA_ID and calls pallioai.com widget endpoints. The requested env var is appropriate for selecting a persona.

Instruction Scope

SKILL.md instructs only two API interactions (init and chat) against pallioai.com, how to maintain history, handle responses, and error codes. It does not instruct reading unrelated files, other env vars, or exfiltrating data to third-party endpoints beyond pallioai.com.

Install Mechanism

No install spec or code files — instruction-only skill. Nothing is downloaded or written to disk by the skill spec itself.

Credentials

Only one env var (PALLIO_PERSONA_ID) is required and declared as the primary credential; this aligns with the described workflow (init the widget for a persona). No unrelated secrets or broad credentials are requested.

Persistence & Privilege

Skill is not always:true and does not request system-wide privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other high-risk factors.

Assessment

This skill is internally consistent: it needs only a persona ID and calls Pallio's public widget endpoints to init a session and send chat messages. Before installing, consider: 1) Trust and privacy — the chat and any user-provided content go to pallioai.com; avoid sending secrets or sensitive data to a public persona. 2) Persona trustworthiness — public personas may expose uploaded documents; only use persona IDs you trust. 3) Tokens and rate limits — the session token is short-lived (2 hours) and free sessions are limited. If you need stricter control or programmatic access, use Pallio's official API with an API key (as documented). If you have concerns about data leaving your environment, do not set the PALLIO_PERSONA_ID or use a local proxy to inspect traffic.

Pallio AI — Knowledge Base Chat

You can chat with a Pallio AI persona — an AI assistant backed by a curated knowledge base of uploaded documents. The persona answers questions using RAG (Retrieval-Augmented Generation) with document citations.

Setup

The user must set the PALLIO_PERSONA_ID environment variable to the ID of a public Pallio persona. Browse available personas at https://pallioai.com/community.

How to Use

Step 1: Initialize a Session

Before sending any messages, initialize a session to get an authentication token.

curl -s "https://pallioai.com/api/widget/init/$PALLIO_PERSONA_ID"

The response contains:

• token — Session token (valid for 2 hours). Store this for all subsequent messages.
• persona.name — The persona's display name.
• persona.welcomeMessage — An introductory message from the persona. Show this to the user.
• persona.starterPrompts — Suggested first questions. Offer these to the user.
• persona.messageLimit — Maximum free messages per session (typically 3).

Step 2: Send Messages

Send the user's message with the session token. Maintain conversation history for context.

curl -s -X POST "https://pallioai.com/api/widget/chat" \
  -H "X-Widget-Token: $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "message": "What topics do you cover?",
    "history": []
  }'

The history array should contain all previous messages in the conversation:

[
  { "role": "user", "content": "What topics do you cover?" },
  { "role": "assistant", "content": "I cover fire safety procedures..." },
  { "role": "user", "content": "Tell me more about ventilation." }
]

The response contains:

• response — The AI-generated answer. Display this to the user.
• sources — Array of { title, page } objects. Display these as citations below the response.
• messageNumber — Which message this is (1, 2, 3...).
• messagesRemaining — How many free messages remain.
• nudge — If "signup_soft", gently suggest signing up. If "signup_required", the session is exhausted.
• signupUrl — URL for the user to create a full Pallio account.

Step 3: Display Sources

When sources is present and non-empty, format citations below the response:

Sources:
- Document Name (p. 42)
- Another Document (p. 15)

Step 4: Handle the Message Limit

Each session allows a limited number of free messages (typically 3).

• When messagesRemaining reaches 0 or nudge is "signup_required", inform the user: "You've used all free messages for this session. Sign up for full access: {signupUrl}"
• To start a new session, call the init endpoint again (rate limited to 30/hour).

For unlimited access, the user can get a Pallio API key (Professional tier or higher) — see https://pallioai.com/settings.

Error Handling

Error Code	Meaning	Action
SESSION_NOT_FOUND	Token is invalid	Re-initialize the session
SESSION_EXPIRED	Token TTL exceeded (2 hours)	Re-initialize the session
MESSAGE_LIMIT_REACHED	Free messages exhausted	Show signup URL
RATE_LIMITED	Too many requests	Wait and retry (check retryAfter field)
PERSONA_NOT_FOUND	Invalid persona ID	Verify PALLIO_PERSONA_ID is correct
WIDGET_DISABLED	Persona owner disabled widget	Try a different persona

Important Notes

• Sessions expire after 2 hours. If you get SESSION_EXPIRED, initialize a new session.
• Rate limits: 30 session inits per IP per hour, 10 messages per IP per hour.
• The persona only answers from its uploaded knowledge base — it will not fabricate answers.
• This is the free widget endpoint. For full RAG pipeline access (hybrid search, more tokens, higher limits), use the Pallio Agent API with an API key.