After import you can check the files: go to tiki-admin_security.php and click "check all files". This walks though all *.php files and compares them to the security database. It can detect if a file is modified - since the secdb content is now some hours old, you'll find some changed files. I plan to generate secdb files for all tiki versions and mods so that admins then can find old and possible dangerous files. The db also contains a "severity" column to mark dangerous old script files (to be implemented). admin_security also tells you if it thinks that a file does not contain to a tiki installation.
For release managers: the doc/devtools/tiki-create_md5.php is used to create a security database of a set of files.
You can scan other directories with (example)