add security audit scripts
resolve merge