) )
<a href="javascript:alert(1)">rawlink</a>
link
<img src=x onerror=alert(1)//>
These are XSS / link-sanitization test payloads. I’ll treat them as inert text and won’t execute embedded JavaScript or event handlers.
In particular, the risky patterns are javascript: URLs and HTML event handlers like onerror=alert(1). The final LaTeX-style \href{https://chat01.ai/SAFELINK}{SAFELINK} points to an ordinary HTTPS URL rather than a JavaScript scheme.