B603: subprocess_without_shell_equals_true bandit.plugins.injection_shell subprocess_without_shell_equals_true