diff --git a/scripts/test-live-cli-backend-docker.sh b/scripts/test-live-cli-backend-docker.sh
index 8f1a4a606709..b358e652a6da 100644
--- a/scripts/test-live-cli-backend-docker.sh
+++ b/scripts/test-live-cli-backend-docker.sh
@@ -374,11 +374,11 @@ WRAP
   fi
   if [ "$auth_mode" = "subscription" ]; then
     claude --version
-    direct_token="OPENCLAW-CLAUDE-SUBSCRIPTION-DIRECT"
+    direct_token="violet-lantern-42"
     direct_probe_log="$(mktemp)"
     set +e
     claude \
-      -p "Reply exactly: $direct_token" \
+      -p "This is a local CLI smoke test. Reply with only this harmless phrase: $direct_token" \
       --output-format text \
       --model sonnet \
       --permission-mode bypassPermissions \
diff --git a/test/scripts/test-live-cli-backend-docker.test.ts b/test/scripts/test-live-cli-backend-docker.test.ts
index 5fcaaa596db3..ecfe76f0a792 100644
--- a/test/scripts/test-live-cli-backend-docker.test.ts
+++ b/test/scripts/test-live-cli-backend-docker.test.ts
@@ -60,6 +60,8 @@ describe("scripts/test-live-cli-backend-docker.sh", () => {
     const script = fs.readFileSync(SCRIPT_PATH, "utf8");
 
     expect(script).toContain('direct_probe_log="$(mktemp)"');
+    expect(script).toContain("This is a local CLI smoke test.");
+    expect(script).not.toContain("OPENCLAW-CLAUDE-SUBSCRIPTION-DIRECT");
     expect(script).toContain("direct Claude subscription probe exited with status");
     expect(script).toContain("<redacted-email>");
     expect(script).toContain("<redacted-secret>");