Agent Plugins Marketplace
← All plugins

spa-request-capture-and-block

v1.1.0

Capture the exact outbound request body a single-page app sends, and stop it before it reaches the server. Use when: (1) you need the real JSON payload of an action (export, purchase, submit) to compare against an expected fix, (2) triggering the action for real would cost money, credits, or create a record you cannot undo, (3) a fetch-only interceptor "did not fire" and the request went out anyway, (4) you must prove which of two endpoints an action actually posts to, (5) you are verifying a frontend fix by observing behaviour rather than reading the bundle, (6) the harness is installed but captures nothing on an Angular/zone.js app — prototype patches are bypassed and you need the constructor-level swap plus a pre-flight proof before any risky click, (7) you must prove a submission actually created something, not just that a request left the browser. Covers patching window.fetch AND XMLHttpRequest together (the XHR half is the one usually missed), the constructor swap for zone.js apps, the pre-flight gate, matcher scope (block the commit call, never the dialog's own reads), recording responses, blocking cleanly, and disarming afterwards — including why a hash-route navigation does not remove the patch.

Claude Code

By voitta-aiLicense: MIT3 GitHub starsUpdated 2 hours ago

Directory evidence

Runtimes
Claude Code
Parsed components
0 skill or MCP entries
Source updated
Sep 28, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install spa-request-capture-and-block for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install spa-request-capture-and-block@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/voitta-ai/skillz

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/spa-request-capture-and-block/.

Plugin files

plugins/spa-request-capture-and-block/
└── .claude-plugin/plugin.json

Plugin manifests1

plugins/spa-request-capture-and-block/.claude-plugin/plugin.json
{
  "name": "spa-request-capture-and-block",
  "version": "1.1.0",
  "description": "Capture the exact outbound request body a single-page app sends, and stop it before it reaches the server. Use when: (1) you need the real JSON payload of an action (export, purchase, submit) to compare against an expected fix, (2) triggering the action for real would cost money, credits, or create a record you cannot undo, (3) a fetch-only interceptor \"did not fire\" and the request went out anyway, (4) you must prove which of two endpoints an action actually posts to, (5) you are verifying a frontend fix by observing behaviour rather than reading the bundle, (6) the harness is installed but captures nothing on an Angular/zone.js app — prototype patches are bypassed and you need the constructor-level swap plus a pre-flight proof before any risky click, (7) you must prove a submission actually created something, not just that a request left the browser. Covers patching window.fetch AND XMLHttpRequest together (the XHR half is the one usually missed), the constructor swap for zone.js apps, the pre-flight gate, matcher scope (block the commit call, never the dialog's own reads), recording responses, blocking cleanly, and disarming afterwards — including why a hash-route navigation does not remove the patch.",
  "author": {
    "name": "voitta-ai"
  },
  "homepage": "https://github.com/voitta-ai/skillz",
  "repository": "https://github.com/voitta-ai/skillz",
  "license": "MIT",
  "skills": "./skills/"
}

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[spa-request-capture-and-block on Agent Plugins Marketplace](https://pluginsmp.com/plugins/spa-request-capture-and-block)