From within VSCode, you can run devcontainers, which bind mounts the project's directory into an isolated Docker container. Safe for --dangerously-skip-permissions
Tried this the other day and the setup on this is super cumbersome and requires you to constantly rebuild your entire dev and Claude Code environment every time you use a new container, including whitelisting URLs for package managers and the like.
As a note, running devcontainers in VSCode is easy, but not required. There is also a CLI tool that uses the same specifications.
You can install it with brew or npm.