LLL Link Text Review / 公開リンク文言点検

What is flagged? Link text that is only a fixed generic phrase (click here, read more, here, こちら, 詳しくはこちら etc.) or only a bare http(s) URL. These are review candidates, not errors.

Why is my draft rejected? Only the published saved snapshot is read. Drafts, unsaved typing and pending revisions are never read.

Does it fix links? No. Fix the text in the editor, save, and review again.

Is the link destination checked? No. Nothing is fetched. Only the hostname (no query or fragment) is shown to help locate the link.

Is the displayed link text changed? No. It is shown as saved (no Unicode normalization). Only comparison with the fixed phrases is normalized. In a spreadsheet-bound report, a cell starting with =, +, - or @ gets a leading ' to prevent formula execution.

Read capabilities only: content:read and schema:read. No writes, KV, storage, external HTTP, cron, analytics or API keys. Private editor panel with host authorization. Results exist only for the request; link text in a copied report may be private, so choose where to share it. Report vulnerabilities to contact@lx3.cafe without secrets.

読取2権限（content:read / schema:read）のみ。本文変更・保存・外部通信なし。コピーしたレポートのリンク文字は非公開の場合があるため共有先に注意してください。

Visible link text is shown exactly as saved. The link text in the table and report is the saved characters, not normalized (no Unicode normalization of what you see; a decomposed é or が stays decomposed). Matching against the fixed phrases uses a separate normalized comparison only. The 512-codepoint limit counts the saved characters.

Report cells and spreadsheets. The report is tab-separated plain text. When pasted into a spreadsheet, a cell that begins with =, +, - or @ (after optional whitespace/control characters) is written with a leading apostrophe (') so it is not run as a formula. This apostrophe is the only change the report makes to displayed text; it applies to every cell, including the link text, field name and entry. Cells containing tab, line break or double quote are wrapped in double quotes (" doubled).

Calling the plugin route directly. The entry to review comes only from the host-attested editor context (route.ui.entry) that EmDash attaches when the request goes through the editor panel. A direct POST to the plugin API route ignores any ui/entry value in the request body, query string or headers. Verified in the real sandbox as another contributor: without the EmDash request header the host answers 403 (CSRF); with it the plugin answers only "Open this panel from a saved article editor." and returns no link text, host name or table. Through the editor path, other authors' entries are denied by the host. The panel needs the host permission content:edit_own_drafts and adds no new privilege.

0.1.0

Adds a review panel for generic link labels and bare URLs in a published article. The report preserves the saved link text so editors can find it in the article, revise it, publish, and run the review again.

Install as a sandboxed EmDash plugin (EmDash 1.4.0 or later, below 2). Open a published, saved article and use the "Link Text Review / リンク文言点検" editor panel. Read-only; no configuration.