How do you expect us to give you an accurate diagnosis if all you give us is dribbles of info and supposition?

If the problem is with SHELLing or RUNning the audit software from within the script, then push it to the RunOnce key instead.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.