You should ensure that you correctly shell-escape the content passed to
that command, to insulate it against the two layers of shell execution I
can see there.  (In an ideal world, act like `exec` or multi-argument
`system`, and take one Ruby argument per CLI argument. :)