Brand Skill support now available in PPT Copilot [Desktop]

🚨 The Signal: PowerPoint Copilot now supports custom 'Brand Skills' uploaded as Markdown files to Brand Kit. This allows organisations to embed specific, approved instructions for AI-driven presentation creation, standardising content generation.

The Impact

Brand managers and users are affected by the introduction of custom AI instructions, posing a risk of malicious or insecure prompt injection.

• Brand Managers: Risk of creating or publishing insecure or malicious custom skills.
• Users: Risk of generating presentations based on compromised or untrusted AI instructions.
• Security Teams: New vector for prompt injection and data exfiltration via custom skills.

The Action

1. Establish a formal review and approval process for all custom Brand Kit skills before publication.
2. Implement content scanning and validation for Markdown files uploaded as custom skills to detect malicious patterns.
3. Educate brand managers on secure prompt engineering principles and the risks of untrusted inputs.
4. Monitor Copilot usage logs for unusual activity related to custom skill invocation or data access.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps