BenchGuard: Who Guards the Benchmarks? Automated Auditing of LLM Agent Benchmarks
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
As benchmarks grow in complexity, many apparent agent failures are not failures of the agent at all---they are failures of the benchmark itself: broken specifications, implicit assumptions, and rigid evaluation scripts that penalize valid alternative approaches. We propose employing frontier LLMs as systematic auditors of evaluation infrastructure, and realize this vision through BenchGuard, the first framework explicitly designed for joint cross-artifact auditing of execution-based agent benchmarks. BenchGuard cross-verifies all benchmark artifacts via structured LLM protocols, optionally incorporating agent solutions or execution traces as additional diagnostic evidence. Deployed on two prominent scientific benchmarks, BenchGuard identified 12 author-confirmed issues in ScienceAgentBench---including fatal errors rendering tasks unsolvable---and exactly matched 83.3% of expert-identified issues on the BIXBench Verified-50 subset, catching defects that prior human review missed entirely. A full audit of 50 complex bioinformatics tasks costs under USD 15, making automated benchmark auditing a practical and valuable complement to human review. A preliminary native-format audit of ProgramBench further demonstrates cross-format applicability. These findings point toward AI-assisted benchmark development, where frontier models serve not only as subjects of evaluation but as active participants in validating the evaluation infrastructure itself.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 21 of its 32 references that are in the map. First posted on arXiv 27 Apr 2026.
Builds on
21 of 32 references.
References · 21
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
- 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,332
- 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 515
- 2024From Generation to Judgment: Opportunities and Challenges of LLM-as-a-judgecited by 480
- 2025Humanity's Last Examcited by 467
- 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 431
- 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 388
- 2024ScienceAgentBench: Toward Rigorous Assessment of Language Agents for Data-Driven Scientific Discoverycited by 208
- 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 200
- 2024Are We Done with MMLU?cited by 178
9 more
- 2026Towards End-to-End Automation of AI Researchcited by 150
- 2024LLM Critics Help Catch LLM Bugscited by 138
- 2025BixBench: a Comprehensive Benchmark for LLM-based Agents in Computational Biologycited by 75
- 2025Are "Solved Issues" in SWE-bench Really Solved Correctly? An Empirical Studycited by 47
- 2025UTBoost: Rigorous Evaluation of Coding Agents on SWE-Benchcited by 44
- 2026HLE-Verified: A Systematic Verification and Structured Revision of Humanity's Last Examcited by 11
- 2026Benchmarks Saturate When The Model Gets Smarter Than The Judgecited by 10
- 2024The Fault in our Stars: Quality Assessment of Code Generation Benchmarkscited by 9
- 2026ELT-Bench-Verified: Benchmark Quality Issues Underestimate AI Agent Capabilitiescited by 2
Built on by
Citing papers per year: 2026: 13.
13 papers.
Sort:
By area:
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 13
- 2026Automated Benchmark Auditing for AI Agents and Large Language Modelscited by 10
- 2026Auditing Harness Tampering in Self-Improving Agentscited by 3
- 2026Automated Transcript Analysis for Detecting Flaws in Agentic Benchmarkscited by 1
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluationcited by 1
- 2026D3-Gym: Constructing Real-World Verifiable Environments for Data-Driven Discoverycited by 0
- 2026AuditRepairBench: A Paired-Execution Trace Corpus for Evaluator-Channel Ranking Instability in Agent Repaircited by 0
- 2026What Makes Software Issue Resolution Tasks Difficult for Agents?cited by 0
- 2026SimVerity: When Does Simulated Agent Success Survive Physical Deployment?cited by 0
- 2026MLIP Detective: Active Failure Mode Discovery Beyond Benchmark Scores for Machine-Learning Interatomic Potentialscited by 0
- 2026Maintaining Benchmarks Against Increasingly Capable Agents: Detection and Remediation of Unearned Passescited by 0
- 2026Do Agent Benchmarks Do What They Say? An Executable-Contract Audit of Tool-Using Agent Environmentscited by 0
- 2026TestJack: Should you trust the results in coding benchmarks? Agentic Coding Benchmarks Auditing via Evaluator Evolution7 Oct 2026
- 2026Do Agent Benchmarks Do What They Say? An Executable-Contract Audit of Tool-Using Agent Environments29 Sep 2026
- 2026Maintaining Benchmarks Against Increasingly Capable Agents: Detection and Remediation of Unearned Passes28 Sep 2026
- 2026MLIP Detective: Active Failure Mode Discovery Beyond Benchmark Scores for Machine-Learning Interatomic Potentials8 Sep 2026
- 2026Auditing Harness Tampering in Self-Improving Agents30 Aug 2026
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluation25 Aug 2026
- 2026SimVerity: When Does Simulated Agent Success Survive Physical Deployment?25 Aug 2026
- 2026What Makes Software Issue Resolution Tasks Difficult for Agents?18 Aug 2026
- 2026Automated Transcript Analysis for Detecting Flaws in Agentic Benchmarks29 Jul 2026
- 2026Automated Benchmark Auditing for AI Agents and Large Language Models25 May 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
- 2026AuditRepairBench: A Paired-Execution Trace Corpus for Evaluator-Channel Ranking Instability in Agent Repair6 May 2026
1 more
- 2026Automated Benchmark Auditing for AI Agents and Large Language Modelscited by 10
- 2026Automated Transcript Analysis for Detecting Flaws in Agentic Benchmarkscited by 1
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluationcited by 1
- 2026Maintaining Benchmarks Against Increasingly Capable Agents: Detection and Remediation of Unearned Passescited by 0
- 2026TestJack: Should you trust the results in coding benchmarks? Agentic Coding Benchmarks Auditing via Evaluator Evolutioncited by 0
- 2026TestJack: Should you trust the results in coding benchmarks? Agentic Coding Benchmarks Auditing via Evaluator Evolution7 Oct 2026
- 2026Maintaining Benchmarks Against Increasingly Capable Agents: Detection and Remediation of Unearned Passes28 Sep 2026
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluation25 Aug 2026
- 2026Automated Transcript Analysis for Detecting Flaws in Agentic Benchmarks29 Jul 2026
- 2026Automated Benchmark Auditing for AI Agents and Large Language Models25 May 2026
- 2026Auditing Harness Tampering in Self-Improving Agentscited by 3
- 2026Auditing Harness Tampering in Self-Improving Agents30 Aug 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 13
- 2026D3-Gym: Constructing Real-World Verifiable Environments for Data-Driven Discoverycited by 0
- 2026AuditRepairBench: A Paired-Execution Trace Corpus for Evaluator-Channel Ranking Instability in Agent Repaircited by 0
- 2026What Makes Software Issue Resolution Tasks Difficult for Agents?cited by 0
- 2026SimVerity: When Does Simulated Agent Success Survive Physical Deployment?cited by 0
- 2026MLIP Detective: Active Failure Mode Discovery Beyond Benchmark Scores for Machine-Learning Interatomic Potentialscited by 0
- 2026Do Agent Benchmarks Do What They Say? An Executable-Contract Audit of Tool-Using Agent Environmentscited by 0
- 2026Do Agent Benchmarks Do What They Say? An Executable-Contract Audit of Tool-Using Agent Environments29 Sep 2026
- 2026MLIP Detective: Active Failure Mode Discovery Beyond Benchmark Scores for Machine-Learning Interatomic Potentials8 Sep 2026
- 2026SimVerity: When Does Simulated Agent Success Survive Physical Deployment?25 Aug 2026
- 2026What Makes Software Issue Resolution Tasks Difficult for Agents?18 Aug 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
- 2026AuditRepairBench: A Paired-Execution Trace Corpus for Evaluator-Channel Ranking Instability in Agent Repair6 May 2026
- 2026D3-Gym: Constructing Real-World Verifiable Environments for Data-Driven Discovery30 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2025SEC-bench: Automated Benchmarking of LLM Agents on Real-World Software Security Tasks
- 2026Beyond Execution: Auditing Experimental Fidelity in LLM-Driven Scientific Research
- 2026Time to REFLECT: Can We Trust LLM Judges for Evidence-based Research Agents?
- 2026Auditing Automated Evaluation, Error Propagation, and Runtime Mitigation in Tool-Using Language Agents
- 2026Benchmark Everything Everywhere All at Once
- 2026Insights Generator: Systematic Corpus-Level Trace Diagnostics for LLM Agents
- 2026BioAgent Bench: An AI Agent Evaluation Suite for Bioinformatics
- 2026RewardHackingAgents: Benchmarking Evaluation Integrity for LLM ML-Engineering Agents