diff --git a/src/security/audit-extra.sync.test.ts b/src/security/audit-extra.sync.test.ts
index 18eb2c042a3..788c1244f67 100644
--- a/src/security/audit-extra.sync.test.ts
+++ b/src/security/audit-extra.sync.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it } from "vitest";
+import { describe, expect, it, vi } from "vitest";
 import type { OpenClawConfig } from "../config/config.js";
 import {
   collectAttackSurfaceSummaryFindings,
@@ -6,6 +6,10 @@ import {
 } from "./audit-extra.summary.js";
 import { safeEqualSecret } from "./secret-equal.js";
 
+vi.mock("../plugins/web-search-credential-presence.js", () => ({
+  hasConfiguredWebSearchCredential: () => false,
+}));
+
 describe("collectAttackSurfaceSummaryFindings", () => {
   it.each([
     {