[refactor] Do not use shell = True since it has some security hazard.