[Security] subprocess invocation uses shell=True

[tejasae-afk]

File: tools/bash/bash.py (line 113)

shell=True makes command construction bugs much easier to exploit.