--- a/src/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/injectionShell.py Fri Aug 02 19:12:15 2024 +0200 +++ b/src/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/injectionShell.py Fri Aug 02 19:24:32 2024 +0200 @@ -285,7 +285,7 @@ node = context.node.args[0] # some calls take an arg list, check the first part - if isinstance(node, ast.List): + if isinstance(node, ast.List) and node.elts: node = node.elts[0] # make sure the param is a string literal and not a var name