Replacing docker with podman could help in this particular case. Running everything in an insulated throwaway VM should help even better.

Unless you trust an AI as much as you trust yourself, there's no reason to allow it to act with your privileges.