diff --git a/src/security/audit-workspace-skill-escape.test.ts b/src/security/audit-workspace-skill-escape.test.ts
index 28c319dd33e..f708e798670 100644
--- a/src/security/audit-workspace-skill-escape.test.ts
+++ b/src/security/audit-workspace-skill-escape.test.ts
@@ -47,11 +47,9 @@ describe("security audit workspace skill path escape findings", () => {
             const findings = await collectWorkspaceSkillSymlinkEscapeFindings({
               cfg: { agents: { defaults: { workspace: workspaceDir } } } satisfies OpenClawConfig,
             });
-            const finding = findings.find(
-              (entry) => entry.checkId === "skills.workspace.symlink_escape",
-            );
-            expect(finding?.severity).toBe("warn");
-            expect(finding?.detail).toContain(outsideSkillPath);
+            const finding = requireFinding(findings, "skills.workspace.symlink_escape");
+            expect(finding.severity).toBe("warn");
+            expect(finding.detail).toContain(outsideSkillPath);
           })()
         : Promise.resolve(),
       (async () => {