shellcheck fixes

* Script: https://github.com/koalaman/shellcheck
* Use $(..) instead of deprecated `..`
* Use double quote to prevent globbing and word splitting.

Change-Id: I68372d4e29ae34e0704e5a605447ad17bf0666d7