The Python documentation makes it clear that having shell=True in your call to subprocess.check_output (and other functions) is a potential security risk. If you're getting input from an unknown or ...

Python’s development team chose defaults that reflect the most common real-world scenarios. But if you do need to tweak the way garbage collection works, you can use Python’s gc module.