A pi zero would do the job and only risk about $5 to find out what's on the stick.

Nice idea. Start a service where people mail unknown USB devices to you and you email back a disk image.

That sounds really interesting. You should post later if you go through with your plan!