How Do LLMs Fail In Agentic Scenarios? A Qualitative Analysis of Success and Failure Scenarios of Various LLMs in Agentic Simulations
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
We investigate how large language models (LLMs) fail when operating as autonomous agents with tool-use capabilities. Using the Kamiwaza Agentic Merit Index (KAMI) v0.1 benchmark, we analyze 900 execution traces from three representative models - Granite 4 Small, Llama 4 Maverick, and DeepSeek V3.1 - across filesystem, text extraction, CSV analysis, and SQL scenarios. Rather than focusing on aggregate scores, we perform fine-grained, per-trial behavioral analysis to surface the strategies that enable successful multi-step tool execution and the recurrent failure modes that undermine reliability. Our findings show that model scale alone does not predict agentic robustness: Llama 4 Maverick (400B) performs only marginally better than Granite 4 Small (32B) in some uncertainty-driven tasks, while DeepSeek V3.1's superior reliability derives primarily from post-training reinforcement learning rather than architecture or size. Across models, we identify four recurring failure archetypes: premature action without grounding, over-helpfulness that substitutes missing entities, vulnerability to distractor-induced context pollution, and fragile execution under load. These patterns highlight the need for agentic evaluation methods that emphasize interactive grounding, recovery behavior, and environment-aware adaptation, suggesting that reliable enterprise deployment requires not just stronger models but deliberate training and design choices that reinforce verification, constraint discovery, and adherence to source-of-truth data.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 9 of its 28 references that are in the map. First posted on arXiv 8 Dec 2025.
Builds on
9 of 28 references.
References · 9
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 349
- 2022Data Contamination: From Memorization to Exploitationcited by 236
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
- 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 158
- 2020Question and Answer Test-Train Overlap in Open-Domain Question Answering Datasetscited by 138
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 106
- 2023Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluationscited by 97
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
- 2024Language model developers should report train-test overlapcited by 16
Built on by
Citing papers per year: 2025: 1; 2026: 6.
7 papers.
- 2026GRASP: Gated Regression-Aware Skill Proposer for Self-Improving LLM Agentscited by 11
- 2026From Chatbot to Digital Colleague: The Paradigm Shift Toward Persistent Autonomous AIcited by 6
- 2026AgentCheck: A Reproduce-Intervene-Mitigate Workbench for LLM Agents over MCPcited by 5
- 2026The Six Sigma Agent: Achieving Enterprise-Grade Reliability in LLM Systems Through Consensus-Driven Decomposed Executioncited by 4
- 2025Scalable and Reliable Evaluation of AI Knowledge Retrieval Systems: RIKER and the Coherent Simulated Universecited by 3
- 2026Partial Evidence Bench: Benchmarking Authorization-Limited Evidence in Agentic Systemscited by 2
- 2026Why Static Skill Inconsistencies Do Not Equate to Runtime Risks: A Behavioral Analysis of LLM Agent Executioncited by 0
- 2026Why Static Skill Inconsistencies Do Not Equate to Runtime Risks: A Behavioral Analysis of LLM Agent Execution13 Oct 2026
- 2026AgentCheck: A Reproduce-Intervene-Mitigate Workbench for LLM Agents over MCP13 Jul 2026
- 2026From Chatbot to Digital Colleague: The Paradigm Shift Toward Persistent Autonomous AI12 Jun 2026
- 2026GRASP: Gated Regression-Aware Skill Proposer for Self-Improving LLM Agents28 May 2026
- 2026Partial Evidence Bench: Benchmarking Authorization-Limited Evidence in Agentic Systems6 May 2026
- 2026The Six Sigma Agent: Achieving Enterprise-Grade Reliability in LLM Systems Through Consensus-Driven Decomposed Execution29 Jan 2026
- 2025Scalable and Reliable Evaluation of AI Knowledge Retrieval Systems: RIKER and the Coherent Simulated Universe22 Dec 2025
Similar, not cited
Close in wording, no citation either way
- 2026Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents
- 2025Where LLM Agents Fail and How They can Learn From Failures
- 2026Silent Failure in LLM Agent Systems: The Entropy Principle and the Inevitable Disorder of Autonomous Agents
- 2025Exploring Autonomous Agents: A Closer Look at Why They Fail When Completing Tasks
- 2024Practical Considerations for Agentic LLM Systems
- 2025AgenTracer: Who Is Inducing Failure in the LLM Agentic Systems?
- 2026From Task Solving to Robust Real-World Adaptation in LLM Agents
- 2026UniACE: A Unified Framework for Evaluating LLM Agentic Capabilities