Brand Skill support now available in PPT Copilot [Mac]

🚨 The Signal: PowerPoint Copilot on Mac now supports custom 'Brand Skills' uploaded as Markdown files to Brand Kit. This allows organisations to embed reusable, approved instructions for presentation creation, potentially standardising content but also introducing a new vector for prompt injection and content governance challenges.

The Impact

Brand managers and Copilot users are affected, with the security risk of unapproved content or malicious instructions being embedded into Copilot's behaviour.

• Brand Managers: Risk of publishing unapproved or malicious 'skills' that influence Copilot output.
• Copilot Users: Risk of generating presentations based on compromised or inappropriate instructions.
• Security Teams: New content governance and prompt injection risks to monitor and mitigate.

The Action

1. Review and update Brand Kit governance policies to include 'Brand Skill' content approval workflows.
2. Educate Brand Managers on secure 'Brand Skill' creation, focusing on prompt injection prevention.
3. Implement content scanning or review processes for uploaded Markdown files within Brand Kit.
4. Monitor Copilot usage logs for unusual activity related to 'Brand Skill' invocation or output.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps