diff --git a/src/security/audit-exec-safe-bins.test.ts b/src/security/audit-exec-safe-bins.test.ts
index caf61f246d7..794ea36fcc9 100644
--- a/src/security/audit-exec-safe-bins.test.ts
+++ b/src/security/audit-exec-safe-bins.test.ts
@@ -12,6 +12,18 @@ function hasFinding(
   return findings.some((finding) => finding.checkId === checkId && finding.severity === "warn");
 }
 
+function requireFinding(
+  checkId: "tools.exec.safe_bin_trusted_dirs_risky",
+  findings: ReturnType<typeof collectExecRuntimeFindings>,
+) {
+  const finding = findings.find((entry) => entry.checkId === checkId);
+  expect(finding).toBeDefined();
+  if (!finding) {
+    throw new Error(`Expected ${checkId} finding`);
+  }
+  return finding;
+}
+
 describe("security audit exec safe-bin findings", () => {
   it.each([
     {
@@ -136,13 +148,11 @@ describe("security audit exec safe-bin findings", () => {
       },
     } satisfies OpenClawConfig);
 
-    const riskyFinding = findings.find(
-      (finding) => finding.checkId === "tools.exec.safe_bin_trusted_dirs_risky",
-    );
-    expect(riskyFinding?.severity).toBe("warn");
-    expect(riskyFinding?.detail).toContain(riskyGlobalTrustedDirs[0]);
-    expect(riskyFinding?.detail).toContain(riskyGlobalTrustedDirs[1]);
-    expect(riskyFinding?.detail).toContain("agents.list.ops.tools.exec");
+    const riskyFinding = requireFinding("tools.exec.safe_bin_trusted_dirs_risky", findings);
+    expect(riskyFinding.severity).toBe("warn");
+    expect(riskyFinding.detail).toContain(riskyGlobalTrustedDirs[0]);
+    expect(riskyFinding.detail).toContain(riskyGlobalTrustedDirs[1]);
+    expect(riskyFinding.detail).toContain("agents.list.ops.tools.exec");
   });
 
   it("ignores non-risky absolute dirs", () => {