AgentNoiseBench: Benchmarking Robustness of Tool-Using LLM Agents Under Noisy Condition
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
Recent advances in large language models have enabled LLM-based agents to achieve strong performance on a variety of benchmarks. However, their performance in real-world deployments often that observed on benchmark settings, especially in complex and imperfect environments. This discrepancy largely arises because prevailing training and evaluation paradigms are typically built on idealized assumptions, overlooking the inherent stochasticity and noise present in real-world interactions. To bridge this gap, we introduce AgentNoiseBench, a framework for systematically evaluating the robustness of agentic models under noisy environments. We first conduct an in-depth analysis of biases and uncertainties in real-world scenarios and categorize environmental noise into two primary types: user-noise and tool-noise. Building on this analysis, we develop an automated pipeline that injects controllable noise into existing agent-centric benchmarks while preserving task solvability. Leveraging this pipeline, we perform extensive evaluations across a wide range of models with diverse architectures and parameter scales. Our results reveal consistent performance variations under different noise conditions, highlighting the sensitivity of current agentic models to realistic environmental perturbations.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 52 of its 71 references that are in the map. First posted on arXiv 11 Feb 2026.
Builds on
52 of 71 references.
Closest ancestors · 9
Same direction, newest first
- 2025Introducing LongCat-Flash-Thinking: A Technical Report23 Sep
- 2025LongCat-Flash Technical Report1 Sep
- 2025GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Models8 Aug
- 2025UserBench: An Interactive Gym Environment for User-Centric Agents29 Jul
- 2025Kimi K2: Open Agentic Intelligence28 Jul
- 2025AGENTIF: Benchmarking Instruction Following of Large Language Models in Agentic Scenarios22 May
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains17 Jun
- 2024Tell Me More! Towards Implicit User Intention Understanding of Language Model Driven Agents14 Feb
- 2023AgentTuning: Enabling Generalized Agent Abilities for LLMs19 Oct
Other references · 43
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,655
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2025Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learningcited by 1,371
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 755
- 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 558
- 2023MINT: Evaluating LLMs in Multi-turn Interaction with Tools and Language Feedbackcited by 293
- 2024ToolSandbox: A Stateful, Conversational, Interactive Evaluation Benchmark for LLM Tool Use Capabilitiescited by 272
31 more
- 2024WebRL: Training LLM Web Agents via Self-Evolving Online Curriculum Reinforcement Learningcited by 243
- 2023MetaTool Benchmark for Large Language Models: Deciding Whether to Use Tools and Which to Usecited by 209
- 2024Trial and Error: Exploration-Based Trajectory Optimization for LLM Agentscited by 194
- 2025MultiChallenge: A Realistic Multi-Turn Conversation Evaluation Benchmark Challenging to Frontier LLMscited by 171
- 2025An Illusion of Progress? Assessing the Current State of Web Agentscited by 165
- 2025Where LLM Agents Fail and How They can Learn From Failurescited by 118
- 2025ACEBench: Who Wins the Match Point in Tool Usage?cited by 66
- 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injectioncited by 53
- 2024CLAMBER: A Benchmark of Identifying and Clarifying Ambiguous Information Needs in Large Language Modelscited by 48
- 2024Understanding User Experience in Large Language Model Interactionscited by 43
- 2023ToolTalk: Evaluating Tool-Usage in a Conversational Settingcited by 42
- 2024Learning to Ask: When LLM Agents Meet Unclear Instructioncited by 38
- 2024Reducing Tool Hallucination via Reliability Alignmentcited by 37
- 2024From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injectioncited by 36
- 2025What Prompts Don't Say: Understanding and Managing Underspecification in LLM Promptscited by 32
- 2024Examining the robustness of LLM evaluation to the distributional assumptions of benchmarkscited by 31
- 2025Benchmarking Reasoning Robustness in Large Language Modelscited by 30
- 2025StructFlowBench: A Structured Flow Benchmark for Multi-turn Instruction Followingcited by 28
- 2025On Robustness and Reliability of Benchmark-Based Evaluation of LLMscited by 23
- 2025PALADIN: Self-Correcting Language Model Agents to Cure Tool-Failure Casescited by 21
- 2024ClarQ-LLM: A Benchmark for Models Clarifying and Requesting Information in Task-Oriented Dialogcited by 20
- 2025SCORE: Systematic COnsistency and Robustness Evaluation for Large Language Modelscited by 19
- 2024ToolScan: A Benchmark for Characterizing Errors in Tool-Use LLMscited by 17
- 2025Enhancing LLM Robustness to Perturbed Instructions: An Empirical Studycited by 17
- 2025Butterfly Effects in Toolchains: A Comprehensive Analysis of Failed Parameter Filling in LLM Tool-Agent Systemscited by 17
- 2025An overview of model uncertainty and variability in LLM-based sentiment analysis. Challenges, mitigation strategies and the role of explainabilitycited by 15
- 2025Robust LLM Training Infrastructure at ByteDancecited by 14
- 2023SAGE: Smart home Agent with Grounded Executioncited by 13
- 2025Rethinking Stateful Tool Use in Multi-Turn Dialogues: Benchmarks and Challengescited by 12
- 2024Evaluating the Performance and Robustness of LLMs in Materials Science Q&A and Property Predictionscited by 9
- 2024Can Tool-augmented Large Language Models be Aware of Incomplete Conditions?cited by 8
Built on by
Citing papers per year: 2026: 19.
19 papers.
Sort:
By area:
- 2026SKILL0: In-Context Agentic Reinforcement Learning for Skill Internalizationcited by 82
- 2026Are Tools All We Need? Unveiling the Tool-Use Tax in LLM Agentscited by 11
- 2026VitaBench 2.0: Evaluating Personalized and Proactive Agents in Long-Term User Interactionscited by 11
- 2026PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystemscited by 10
- 2026Beyond Function Calling: Benchmarking Tool-Using Agents under Tool-Environment Unreliabilitycited by 5
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environmentscited by 4
- 2026Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agentscited by 3
- 2026How Much Coordination Gain Is Real? A Paired Noise-Floor Protocol for Multi-Agent LLM Benchmarkscited by 2
- 2026The Devil Is in the Interface: Evaluating How Tool Architecture Shapes Coding Agent Behaviorcited by 2
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agentscited by 2
- 2026The Sim-to-Real Gap of Foundation Model Agents: A Unified MDP Perspectivecited by 1
- 2026PredAct-Bench: Benchmarking Tool-Augmented Dialogue under Controlled Tool Noisecited by 0
7 more
- 2026Retry, Switch, or Abstain? Learning Strategy-Aware Tool-Use Policies via Controlled Error Injectioncited by 0
- 2026Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responsescited by 0
- 2026DuMateBench: Evaluating Autonomous Agents in Complex Real-World Workflowscited by 0
- 2026Agents Trust Tools Too Much: Measuring Reliance on Unreliable Toolscited by 0
- 2026Vision: Data-Centric Anchoring for Robust and Interpretable Agentic AIcited by 0
- 2026Luck Is Not Skill: When Do Paired Rollouts Help Group-Relative RL of LLM Agents?cited by 0
- 2026Agent Evaluation Reliability: More Tasks Won't (Always) Fix An Agent Leaderboardcited by 0
- 2026Agent Evaluation Reliability: More Tasks Won't (Always) Fix An Agent Leaderboard30 Sep 2026
- 2026Luck Is Not Skill: When Do Paired Rollouts Help Group-Relative RL of LLM Agents?21 Sep 2026
- 2026Vision: Data-Centric Anchoring for Robust and Interpretable Agentic AI8 Sep 2026
- 2026Agents Trust Tools Too Much: Measuring Reliance on Unreliable Tools4 Sep 2026
- 2026DuMateBench: Evaluating Autonomous Agents in Complex Real-World Workflows27 Aug 2026
- 2026Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responses24 Aug 2026
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agents23 Aug 2026
- 2026Retry, Switch, or Abstain? Learning Strategy-Aware Tool-Use Policies via Controlled Error Injection12 Aug 2026
- 2026The Devil Is in the Interface: Evaluating How Tool Architecture Shapes Coding Agent Behavior11 Aug 2026
- 2026PredAct-Bench: Benchmarking Tool-Augmented Dialogue under Controlled Tool Noise3 Aug 2026
- 2026Beyond Function Calling: Benchmarking Tool-Using Agents under Tool-Environment Unreliability24 Jun 2026
- 2026PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystems21 Jun 2026
7 more
- 2026Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agents19 Jun 2026
- 2026How Much Coordination Gain Is Real? A Paired Noise-Floor Protocol for Multi-Agent LLM Benchmarks15 Jun 2026
- 2026The Sim-to-Real Gap of Foundation Model Agents: A Unified MDP Perspective5 Jun 2026
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environments26 May 2026
- 2026VitaBench 2.0: Evaluating Personalized and Proactive Agents in Long-Term User Interactions26 May 2026
- 2026Are Tools All We Need? Unveiling the Tool-Use Tax in LLM Agents30 Apr 2026
- 2026SKILL0: In-Context Agentic Reinforcement Learning for Skill Internalization2 Apr 2026
- 2026SKILL0: In-Context Agentic Reinforcement Learning for Skill Internalizationcited by 82
- 2026Are Tools All We Need? Unveiling the Tool-Use Tax in LLM Agentscited by 11
- 2026VitaBench 2.0: Evaluating Personalized and Proactive Agents in Long-Term User Interactionscited by 11
- 2026PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystemscited by 10
- 2026Beyond Function Calling: Benchmarking Tool-Using Agents under Tool-Environment Unreliabilitycited by 5
- 2026Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environmentscited by 4
- 2026Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agentscited by 3
- 2026How Much Coordination Gain Is Real? A Paired Noise-Floor Protocol for Multi-Agent LLM Benchmarkscited by 2
- 2026The Devil Is in the Interface: Evaluating How Tool Architecture Shapes Coding Agent Behaviorcited by 2
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agentscited by 2
- 2026The Sim-to-Real Gap of Foundation Model Agents: A Unified MDP Perspectivecited by 1
- 2026Retry, Switch, or Abstain? Learning Strategy-Aware Tool-Use Policies via Controlled Error Injectioncited by 0
12 most cited of 18 All 18 (JSON)
- 2026Agent Evaluation Reliability: More Tasks Won't (Always) Fix An Agent Leaderboard30 Sep 2026
- 2026Luck Is Not Skill: When Do Paired Rollouts Help Group-Relative RL of LLM Agents?21 Sep 2026
- 2026Vision: Data-Centric Anchoring for Robust and Interpretable Agentic AI8 Sep 2026
- 2026Agents Trust Tools Too Much: Measuring Reliance on Unreliable Tools4 Sep 2026
- 2026DuMateBench: Evaluating Autonomous Agents in Complex Real-World Workflows27 Aug 2026
- 2026Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responses24 Aug 2026
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agents23 Aug 2026
- 2026Retry, Switch, or Abstain? Learning Strategy-Aware Tool-Use Policies via Controlled Error Injection12 Aug 2026
- 2026The Devil Is in the Interface: Evaluating How Tool Architecture Shapes Coding Agent Behavior11 Aug 2026
- 2026Beyond Function Calling: Benchmarking Tool-Using Agents under Tool-Environment Unreliability24 Jun 2026
- 2026PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystems21 Jun 2026
- 2026Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agents19 Jun 2026
12 newest of 18 All 18 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2023AgentBench: Evaluating LLMs as Agents
- 2026AgentGym2: Benchmarking Large Language Model Agents in De-Idealized Real-World Environments
- 2025Multi-Mission Tool Bench: Assessing the Robustness of LLM based Agents through Related and Dynamic Missions
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents
- 2026Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents
- 2024AgentQuest: A Modular Benchmark Framework to Measure Progress and Improve LLM Agents
- 2026When Simulation Lies: A Sim-to-Real Benchmark and Domain-Randomized RL Recipe for Tool-Use Agents
- 2026ToolMenuBench: Benchmarking Tool-Menu Filtering Strategies for Reliable and Efficient LLM Agents