I made a little project called Claudito (little Claude, in a sandbox) that runs Claude Code in a docker container, isolating it from your filesystem, your SSH keys, etc. Check it out: https://github.com/micahflee/claudito