diff --git a/src/security/audit-channel-synology-zalo.test.ts b/src/security/audit-channel-synology-zalo.test.ts
index d84b46adda1..b04c4147bea 100644
--- a/src/security/audit-channel-synology-zalo.test.ts
+++ b/src/security/audit-channel-synology-zalo.test.ts
@@ -1,8 +1,10 @@
 import { describe, expect, it } from "vitest";
+import {
+  collectSynologyChatSecurityAuditFindings,
+  collectZalouserSecurityAuditFindings,
+} from "../../test/helpers/channels/security-audit-contract.js";
 import type { ChannelPlugin } from "../channels/plugins/types.js";
 import type { OpenClawConfig } from "../config/config.js";
-import { collectSynologyChatSecurityAuditFindings } from "../plugin-sdk/synology-chat.js";
-import { collectZalouserSecurityAuditFindings } from "../plugin-sdk/zalouser.js";
 import { withChannelSecurityStateDir } from "./audit-channel-security.test-helpers.js";
 import { collectChannelSecurityFindings } from "./audit-channel.js";
 
diff --git a/src/security/audit-feishu-doc-risk.test.ts b/src/security/audit-feishu-doc-risk.test.ts
index 3bd2f122ee8..f0e8cbb0d5c 100644
--- a/src/security/audit-feishu-doc-risk.test.ts
+++ b/src/security/audit-feishu-doc-risk.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
+import { collectFeishuSecurityAuditFindings } from "../../test/helpers/channels/security-audit-contract.js";
 import type { OpenClawConfig } from "../config/config.js";
-import { collectFeishuSecurityAuditFindings } from "../plugin-sdk/feishu-security.js";
 
 describe("security audit Feishu doc risk findings", () => {
   it.each([