This means the /install/ directory still exists on your server. Someone could use that to re-install OpenCart, which is why it's a security risk. You can either rename that folder to something else, or delete it entirely (since you shouldn't need it again).