From bb8a16f37c14f89243bc228eded2f1cc8e08bb95 Mon Sep 17 00:00:00 2001
From: Shakker <shakkerdroid@gmail.com>
Date: Fri, 8 May 2026 21:09:03 +0100
Subject: [PATCH] test: tighten workspace skill assertion

---
 src/security/audit-workspace-skill-escape.test.ts | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/src/security/audit-workspace-skill-escape.test.ts b/src/security/audit-workspace-skill-escape.test.ts
index 28c319dd33e..f708e798670 100644
--- a/src/security/audit-workspace-skill-escape.test.ts
+++ b/src/security/audit-workspace-skill-escape.test.ts
@@ -47,11 +47,9 @@ describe("security audit workspace skill path escape findings", () => {
             const findings = await collectWorkspaceSkillSymlinkEscapeFindings({
               cfg: { agents: { defaults: { workspace: workspaceDir } } } satisfies OpenClawConfig,
             });
-            const finding = findings.find(
-              (entry) => entry.checkId === "skills.workspace.symlink_escape",
-            );
-            expect(finding?.severity).toBe("warn");
-            expect(finding?.detail).toContain(outsideSkillPath);
+            const finding = requireFinding(findings, "skills.workspace.symlink_escape");
+            expect(finding.severity).toBe("warn");
+            expect(finding.detail).toContain(outsideSkillPath);
           })()
         : Promise.resolve(),
       (async () => {