> For the complete documentation index, see [llms.txt](https://docs.yagi.fi/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.yagi.fi/developers/automation/security.md).

# Security

Yagi is currently a non-custodial protocol, however, keepers do require permissionless access to the task interface on a contract. Therefore, it is up to the task author to only use Yagi for non-exploitable actions such as rebalancing, harvesting, filling limit orders, etc.

{% hint style="info" %}
Do not create external functions on your smart contract that could be exploited by malicious external actors
{% endhint %}