xp_cmdshell has some serious security implications. In that case, it's easier to not deal with that particular set of landmines and just implement that functionality through SSIS.