sha256:f7248fa57df79368b20f1c334eed99861687da4df707358585ce023ea7735653
Last pushed
14 days by ajeetraina777
Type
Sandbox Kit
Manifest digest
sha256:f7248fa57df79368b20f1c334eed99861687da4df707358585ce023ea7735653
Installs the Datadog AI Guard SDKs (Python ddtrace + Node dd-trace) and wires agentless credentials/env so AI apps and agents built inside the sandbox can screen LLM prompts, tool calls, and outputs for prompt injection, jailbreaks, tool misuse, and sensitive-data exfiltration via client.evaluate(...). Datadog API/APP keys are proxy-injected and never enter the container. Sets DD_* environment variables (last-wins if a later --kit overrides them).
| Name | Required | Default | Description |
|---|---|---|---|
apm | Optional | false | Send AI Guard evaluations as APM traces so they appear in the Datadog UI ("AI Guard / Submit your first trace"). "true" runs a Datadog Agent container in the sandbox (trace intake on 127.0.0.1:8126) that forwards through the credential-injecting proxy. Default "false" keeps the kit fully agentless — evaluate() still returns live verdicts for inline enforcement, they just won't show in the trace UI. |
env | Optional | sandbox | Value for DD_ENV (deployment environment tag). |
service | Optional | sbx-ai-guard | Value for DD_SERVICE (service name tag). |
site | Optional | datadoghq.com | Datadog site (DD_SITE): datadoghq.com | datadoghq.eu | us3.datadoghq.com | us5.datadoghq.com | ap1.datadoghq.com |
| Name | Service | Required | Description |
|---|---|---|---|
DD_API_KEY | datadogapi | Required | Datadog API key (sent as the DD-API-KEY header). |
DD_APP_KEY | datadogapp | Required | Datadog application key (sent as the DD-APPLICATION-KEY header). |
app.${{ kit.args.site }}
${{ kit.args.site }}
*.${{ kit.args.site }}
pypi.org
files.pythonhosted.org
registry.npmjs.org
trace.agent.${{ kit.args.site }}
registry-1.docker.io
auth.docker.io
production.cloudflare.docker.com
sbx run <agent> --kit ajeetraina777/datadog-ai-guard-kit:latestRun the following command to install sbx on your machine.
brew install docker/tap/sbxwinget install Docker.sbx