Shellcheck does cover that. I think the bigger problem is people programming without warnings (in any language).

edit: Although I can see that if they hadn't made string splitting the default, it would have saved a lot of headaches.