ToolBeHonest: A Multi-level Hallucination Diagnostic Benchmark for Tool-Augmented Large Language Models
Not on the map. Why?
Abstract (arXiv)
Tool-augmented large language models (LLMs) are rapidly being integrated into real-world applications. Due to the lack of benchmarks, the community has yet to fully understand the hallucination issues within these models. To address this challenge, we introduce a comprehensive diagnostic benchmark, ToolBH. Specifically, we assess the LLM's hallucinations through two perspectives: depth and breadth. In terms of depth, we propose a multi-level diagnostic process, including (1) solvability detection, (2) solution planning, and (3) missing-tool analysis. For breadth, we consider three scenarios based on the characteristics of the toolset: missing necessary tools, potential tools, and limited functionality tools. Furthermore, we developed seven tasks and collected 700 evaluation samples through multiple rounds of manual annotation. The results show the significant challenges presented by the ToolBH benchmark. The current advanced models Gemini-1.5-Pro and GPT-4o only achieve total scores of 45.3 and 37.0, respectively, on a scale of 100. In this benchmark, larger model parameters do not guarantee better performance; the training data and response strategies also play crucial roles in tool-enhanced LLM scenarios. Our diagnostic analysis indicates that the primary reason for model errors lies in assessing task solvability. Additionally, open-weight models suffer from performance drops with verbose replies, whereas proprietary models excel with longer reasoning.
Key facts. Cited by 25 papers in the map (data through 7 Oct 2026). Builds on 14 of its 30 references that are in the map. First posted on arXiv 28 Jun 2024.
Builds on
14 of 30 references.
References · 14
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2023AgentBench: Evaluating LLMs as Agentscited by 1,211
- 2023Gemini: A Family of Highly Capable Multimodal Modelscited by 810
- 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
- 2023Augmented Language Models: a Surveycited by 398
- 2024AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agentscited by 319
- 2023ToolQA: A Dataset for LLM Question Answering with External Toolscited by 273
- 2023MetaTool Benchmark for Large Language Models: Deciding Whether to Use Tools and Which to Usecited by 209
- 2024StableToolBench: Towards Stable Large-Scale Benchmarking on Tool Learning of Large Language Modelscited by 129
Built on by
Citing papers per year: 2024: 1; 2025: 6; 2026: 18.
25 papers.
Sort:
By area:
- 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agentscited by 63
- 2025Evaluating LLM-based Agents for Multi-Turn Conversations: A Surveycited by 56
- 2025TruthRL: Incentivizing Truthful LLMs via Reinforcement Learningcited by 20
- 2025Beyond the Final Answer: Evaluating the Reasoning Trajectories of Tool-Augmented Agentscited by 20
- 2026Time to REFLECT: Can We Trust LLM Judges for Evidence-based Research Agents?cited by 10
- 2025IP Leakage Attacks Targeting LLM-Based Multi-Agent Systemscited by 8
- 2026ToolFailBench: Diagnosing Tool-Use Failures in LLM Agentscited by 8
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?cited by 8
- 2025Hidden in the Haystack: Smaller Needles are More Difficult for LLMs to Findcited by 7
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Usecited by 5
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environmentscited by 4
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
13 more
- 2026Beyond Fluency: Toward Reliable Trajectories in Agentic IRcited by 2
- 2026Ambig-DS: A Benchmark for Task-Framing Ambiguity in Data-Science Agentscited by 2
- 2026When Should LLMs Search? Counterfactual Supervision for Search Routingcited by 2
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMscited by 2
- 2025Value-Guided Iterative Refinement and the DIQ-H Benchmark for Evaluating VLM Robustnesscited by 1
- 2026Beyond Final Answers: Auditing Trajectory-Level Hallucinations in Multi-Agent Industrial Workflowscited by 1
- 2026Human-on-the-Loop Orchestration for AI-Assisted Legal Discoverycited by 0
- 2026CIPHER: A Decoupled Exploration-Selection Framework for Test-Time Scaling of Data Science Agentscited by 0
- 2026PredAct-Bench: Benchmarking Tool-Augmented Dialogue under Controlled Tool Noisecited by 0
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewardscited by 0
- 2026Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responsescited by 0
- 2026Closed-World Resolution Against Tool Hallucination in LLM Agentscited by 0
- 2026Failure-Transparent Agents: Benchmarking Post-Failure Reporting in Tool-Using Language Modelscited by 0
- 2026Failure-Transparent Agents: Benchmarking Post-Failure Reporting in Tool-Using Language Models28 Sep 2026
- 2026Closed-World Resolution Against Tool Hallucination in LLM Agents16 Sep 2026
- 2026Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responses24 Aug 2026
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMs22 Aug 2026
- 2026PredAct-Bench: Benchmarking Tool-Augmented Dialogue under Controlled Tool Noise3 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewards24 Jul 2026
- 2026CIPHER: A Decoupled Exploration-Selection Framework for Test-Time Scaling of Data Science Agents15 Jul 2026
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?11 Jul 2026
- 2026When Should LLMs Search? Counterfactual Supervision for Search Routing7 Jul 2026
- 2026ToolFailBench: Diagnosing Tool-Use Failures in LLM Agents6 Jul 2026
- 2026Human-on-the-Loop Orchestration for AI-Assisted Legal Discovery18 Jun 2026
13 more
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environments26 May 2026
- 2026Beyond Final Answers: Auditing Trajectory-Level Hallucinations in Multi-Agent Industrial Workflows22 May 2026
- 2026Time to REFLECT: Can We Trust LLM Judges for Evidence-based Research Agents?18 May 2026
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Use13 May 2026
- 2026Ambig-DS: A Benchmark for Task-Framing Ambiguity in Data-Science Agents10 May 2026
- 2026Beyond Fluency: Toward Reliable Trajectories in Agentic IR5 Apr 2026
- 2025Value-Guided Iterative Refinement and the DIQ-H Benchmark for Evaluating VLM Robustness3 Dec 2025
- 2025Beyond the Final Answer: Evaluating the Reasoning Trajectories of Tool-Augmented Agents3 Oct 2025
- 2025TruthRL: Incentivizing Truthful LLMs via Reinforcement Learning30 Sep 2025
- 2025Hidden in the Haystack: Smaller Needles are More Difficult for LLMs to Find23 May 2025
- 2025IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems18 May 2025
- 2025Evaluating LLM-based Agents for Multi-Turn Conversations: A Survey28 Mar 2025
- 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents14 Nov 2024
- 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agentscited by 63
- 2025Evaluating LLM-based Agents for Multi-Turn Conversations: A Surveycited by 56
- 2026Time to REFLECT: Can We Trust LLM Judges for Evidence-based Research Agents?cited by 10
- 2025IP Leakage Attacks Targeting LLM-Based Multi-Agent Systemscited by 8
- 2026ToolFailBench: Diagnosing Tool-Use Failures in LLM Agentscited by 8
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?cited by 8
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Usecited by 5
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environmentscited by 4
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
- 2026Beyond Fluency: Toward Reliable Trajectories in Agentic IRcited by 2
- 2026Ambig-DS: A Benchmark for Task-Framing Ambiguity in Data-Science Agentscited by 2
- 2026Beyond Final Answers: Auditing Trajectory-Level Hallucinations in Multi-Agent Industrial Workflowscited by 1
12 most cited of 15 All 15 (JSON)
- 2026Closed-World Resolution Against Tool Hallucination in LLM Agents16 Sep 2026
- 2026Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responses24 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026Search-G1: Grounded Search Agents via Representation-Based Intrinsic Rewards24 Jul 2026
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?11 Jul 2026
- 2026ToolFailBench: Diagnosing Tool-Use Failures in LLM Agents6 Jul 2026
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environments26 May 2026
- 2026Beyond Final Answers: Auditing Trajectory-Level Hallucinations in Multi-Agent Industrial Workflows22 May 2026
- 2026Time to REFLECT: Can We Trust LLM Judges for Evidence-based Research Agents?18 May 2026
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Use13 May 2026
- 2026Ambig-DS: A Benchmark for Task-Framing Ambiguity in Data-Science Agents10 May 2026
- 2026Beyond Fluency: Toward Reliable Trajectories in Agentic IR5 Apr 2026
12 newest of 15 All 15 (JSON)
- 2025TruthRL: Incentivizing Truthful LLMs via Reinforcement Learningcited by 20
- 2025Hidden in the Haystack: Smaller Needles are More Difficult for LLMs to Findcited by 7
- 2026When Should LLMs Search? Counterfactual Supervision for Search Routingcited by 2
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMscited by 2
- 2026PredAct-Bench: Benchmarking Tool-Augmented Dialogue under Controlled Tool Noisecited by 0
- 2026Failure-Transparent Agents: Benchmarking Post-Failure Reporting in Tool-Using Language Modelscited by 0
- 2026Failure-Transparent Agents: Benchmarking Post-Failure Reporting in Tool-Using Language Models28 Sep 2026
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMs22 Aug 2026
- 2026PredAct-Bench: Benchmarking Tool-Augmented Dialogue under Controlled Tool Noise3 Aug 2026
- 2026When Should LLMs Search? Counterfactual Supervision for Search Routing7 Jul 2026
- 2025TruthRL: Incentivizing Truthful LLMs via Reinforcement Learning30 Sep 2025
- 2025Hidden in the Haystack: Smaller Needles are More Difficult for LLMs to Find23 May 2025