code annotate code Feb.18, includes the functionality of scanning files to find out files that only contains sensitive operations but no require_capability or has_capability function calls