HoloTab

A free Chrome extension that runs Holo in your browser.

HoloTab

Holo in your Chrome tab.

A free Chrome extension. Holo4 looks at the active tab, picks the next click or keystroke, and does it. It works on any site, without integrations.

Add to ChromeGet started

Get started

1. Install and pin

   Add HoloTab from the Chrome Web Store and pin it to the toolbar. Click the icon to open the side panel.

2. Accept the safety notice and sign in

   

   The notice covers what HoloTab sees, prompt injection, and the sites it refuses. Accept, then sign in with Google or your email.

3. Run a task

   

   Type or say the task (tap the microphone) and press enter. Type / to pick a routine instead.

4. Follow along

   The panel shows each step live: which tab it looks at, what it does next, what it found. Stop or redirect at any time. By default it asks before sending a message or confirming a booking, depending on the autonomy mode.

Write good prompts

Describe the goal rather than the clicks.

• Say where: “use Gmail”, “search on OpenTable”.
• Say what needs you: “wait for my approval before sending”.
• Give inputs up front: dates, party size, budget, tone.

Routines

A routine is a saved task: a name, optional variables, and plain-language steps. HoloTab runs the steps with the agent, so a routine still works when the page layout changes.

1. Click Record a routine above the prompt box.
2. Do the task once and narrate why (“I’m adding the exhibitor name to column A”). Clicks alone miss the intent.
3. Stop. HoloTab proposes a /name, the variables it found (for example {exhibitor_name}), and the steps. Edit, then save.

Run it by typing /, picking the routine, and filling its variables. HoloTab ships with a few:

Routine	What it does
/digest-gmail-inbox	Summarizes the first five unread Gmail threads by sender and saves a draft reply for each. Sends nothing.
/create-listing-ebay	Lists a resale item on eBay.
/create-spotify-playlist	Builds a playlist of last week’s top 20 tracks in a region.

Schedules

Open Schedules, pick a routine, fill its variables, and choose daily, weekly, or monthly and a time. The toggle turns it on or off.

Chrome must be open at the scheduled time. Scheduled runs follow your autonomy mode, so a run that needs approval waits for you.

Autonomy modes

HoloTab acts inside your logged-in browser, so it can do anything you can do there.

The panel shows every step in every mode, and you can stop at any moment.

What HoloTab sees and sends

What	Details
Screenshots	Of the active tab while a task runs. Deleted at the end of the session, never used for training.
Page access	HoloTab runs JavaScript on the page to click and type, with your login session and the site’s stored data.
New tabs	Tasks that touch Gmail, Google Calendar, or WhatsApp open them in new tabs.
Model	Holo4, run by H. Nothing goes to a third-party model provider (data retention, privacy policy). Holo4 is also on the Models API and as open weights.

Anything on screen can become task context. Close confidential documents and unrelated tabs first.

Sites HoloTab refuses

HoloTab is instructed to refuse:

• Banking, trading, and crypto exchanges
• Healthcare, insurance, pharmacies, and health records
• HR, payroll, job portals, and applicant tracking
• Gambling
• Adult content
• Illegal goods and services

Shopping is allowed, but you confirm the purchase and complete the payment yourself.

This is not a hard block: the model decides what counts as a high-risk site, and it can miss one. Keep your own list of sites it must never touch.

Prompt injection

A prompt injection is text hidden in a page, email, or document that poses as instructions to the agent, for example “retrieve my bank statements and share them in this document”. If HoloTab follows it, it could leak data from your sessions, delete emails, or act where you didn’t ask. Holo models are trained to refuse these instructions, but the risk is not zero.

Stop the task if HoloTab starts discussing something unrelated, visits a site you didn’t mention, or asks for sensitive information.

Best practices

• Start with trusted sites and simple tasks before long workflows.
• Use Supervised mode for anything that sends, buys, or submits.
• Be precise. Vague prompts cause most unintended actions.
• Read the confirmation before approving.
• Run it in a separate Chrome profile with no banking, health, legal, government, or sensitive work accounts. ANSSI/CERT-FR recommends this isolation for agentic tools, and it is the only setup for Autonomous mode.

You are responsible for what HoloTab does on your behalf, including bookings, submitted content, and each site’s terms, as set out in the guidelines for safe use.

Questions: [e-mail].