Dagger also made something: https://github.com/dagger/container-use

Afaik, code running inside https://github.com/dagger/container-use can still access files outside the current directory.

Do you have any source for that claim? I'm curious and worried.

Does the lack of pip confuse Claude, that would seemingly be pretty big

> Does the lack of pip confuse Claude, that would seemingly be pretty big

It has not been an issue for me. But yeah, one can always enhance and use a custom image with whatever possible tools they want to install.