First thank you for your work.
In UnixPlatform.class, command arguements are escaped using double quotes, but, it's not safe, a better way is using escapeshellarg(). In addition, with escapeshellargs, it's become safe mode/ exec_dir patch compatible.
You can found in attachment the patch.
Hope it will be include in the next release