LocalFileSystemTools can now read files, not just write them, once you set the enable_read_file flag. By default it keeps every file operation inside your target_directory, so an agent stays within the folder you hand it rather than roaming the wider file system. Set restrict_to_base_dir=False to opt out when you deliberately need broader access.
See the Local File System docs for the full parameter list.