You can't access the file system from the sandbox, but a non-sandboxed page can. This example shows how to initiate a request for a file inside the sandbox, respond to that request outside the sandbox, and then send the selected file back down in. All with the magic of the Pkg plugin.