spa-request-capture-and-block
v1.1.0Capture the exact outbound request body a single-page app sends, and stop it before it reaches the server. Use when: (1) you need the real JSON payload of an action (export, purchase, submit) to compare against an expected fix, (2) triggering the action for real would cost money, credits, or create a record you cannot undo, (3) a fetch-only interceptor "did not fire" and the request went out anyway, (4) you must prove which of two endpoints an action actually posts to, (5) you are verifying a frontend fix by observing behaviour rather than reading the bundle, (6) the harness is installed but captures nothing on an Angular/zone.js app — prototype patches are bypassed and you need the constructor-level swap plus a pre-flight proof before any risky click, (7) you must prove a submission actually created something, not just that a request left the browser. Covers patching window.fetch AND XMLHttpRequest together (the XHR half is the one usually missed), the constructor swap for zone.js apps, the pre-flight gate, matcher scope (block the commit call, never the dialog's own reads), recording responses, blocking cleanly, and disarming afterwards — including why a hash-route navigation does not remove the patch.
By voitta-aiLicense: MIT3 GitHub starsUpdated 2 hours ago
Directory evidence
- Runtimes
- Claude Code
- Parsed components
- 0 skill or MCP entries
- Source updated
- Sep 28, 2026
- Manifest status
- Canonical path parsed
The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →
Install spa-request-capture-and-block for Claude Code
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install spa-request-capture-and-block@agent-plugin-marketplacePaste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.
The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.
Get the source manually
git clone https://github.com/voitta-ai/skillzClone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/spa-request-capture-and-block/.
Plugin files
└── .claude-plugin/plugin.json
Plugin manifests1
{
"name": "spa-request-capture-and-block",
"version": "1.1.0",
"description": "Capture the exact outbound request body a single-page app sends, and stop it before it reaches the server. Use when: (1) you need the real JSON payload of an action (export, purchase, submit) to compare against an expected fix, (2) triggering the action for real would cost money, credits, or create a record you cannot undo, (3) a fetch-only interceptor \"did not fire\" and the request went out anyway, (4) you must prove which of two endpoints an action actually posts to, (5) you are verifying a frontend fix by observing behaviour rather than reading the bundle, (6) the harness is installed but captures nothing on an Angular/zone.js app — prototype patches are bypassed and you need the constructor-level swap plus a pre-flight proof before any risky click, (7) you must prove a submission actually created something, not just that a request left the browser. Covers patching window.fetch AND XMLHttpRequest together (the XHR half is the one usually missed), the constructor swap for zone.js apps, the pre-flight gate, matcher scope (block the commit call, never the dialog's own reads), recording responses, blocking cleanly, and disarming afterwards — including why a hash-route navigation does not remove the patch.",
"author": {
"name": "voitta-ai"
},
"homepage": "https://github.com/voitta-ai/skillz",
"repository": "https://github.com/voitta-ai/skillz",
"license": "MIT",
"skills": "./skills/"
}For maintainers
If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.
[spa-request-capture-and-block on Agent Plugins Marketplace](https://pluginsmp.com/plugins/spa-request-capture-and-block)