The library does indeed [already handle shell escaping](https://github.com/cpliakas/git-wrapper/search?q=escape&ref=cmdform). No need to do an `escapeshellcmd`.