Any agent that accepts "work in this working directory" (which AFAIK, all of them do) have had this ability, even the initial GPT2/3 experiments around matching LLMs with primitive tool-calling.

Fair, so let's do

  s/has the ability to/is meant to