The decomposer engine of SEP does this action ..
Normally it scans three level deep to a zip file ( that a file inside a zip that inside a zip and that inside a zip.
It can detect and take action against it however if the zip file is password protected it will not be able to scan it