Claude Code has system-level capabilities including executing terminal commands and reading/writing files, and restricts the directory scope accessible to the AI and the types of commands it can execute through a permission sandbox mechanism.