I wrote a cli that gives GPT a containerized shell with access only to the current working directory. I use it for file conversions and things like that. It will install the software it needs into the container.

https://github.com/drifting-in-space/botsh