Brand Skill support now available in PPT Copilot [Web]

🚨 The Signal: PowerPoint Copilot will support custom 'Brand Skills' uploaded as Markdown files to Brand Kit. This allows organisations to embed reusable, approved instructions, potentially standardising content creation but also introducing new vectors for prompt injection and data exfiltration.

The Impact

Brand managers and Copilot users are affected by new AI customisation, introducing risks of prompt injection, data leakage, and unapproved content generation.

• Brand Managers: Risk of inadvertently publishing malicious or poorly designed custom skills.
• Copilot Users: Risk of receiving compromised or misleading content from custom skills.
• Security Teams: New attack surface for prompt injection and data exfiltration via custom skills.
• Compliance Teams: Increased complexity in ensuring AI-generated content adheres to policy.

The Action

1. Review and update AI governance policies to include custom Copilot skills.
2. Implement a strict approval workflow for all custom skills uploaded to Brand Kit.
3. Educate brand managers on secure skill development and prompt engineering best practices.
4. Monitor Copilot usage and content generation for anomalies related to custom skills.
5. Assess data classification and access controls for content generated by custom skills.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps