Why are you using `mkdir` and not the `file`-resouce to create a directory?
With this implementation the path should be escaped in `command`, but not be escaped in `creates`.