Since you already seem to be a fan of Python, how about CardStock? https://cardstock.run

There's also Decker, which by default is tightly sandboxed but has opt-in APIs for filesystem IO, invoking external processes, etc: http://beyondloom.com/decker/