AI Paper Atlas

Research map / Multi-agent systems and games / LLM agents

Software engineering agent benchmarks

Builds repository-level environments and benchmarks for coding and computer-use agents.

129 accepted papers at ICML, NeurIPS, ICLR, CVPR and AAAI (2023–2026) · an approach in LLM agents, keyword cluster “llm agents · llms · agent systems”

State History Tried Checklist Preprints Who Export

Where it stands

Not enough benchmark data Fewer than four papers report the same benchmark, so there is no record to follow.

3 papers in 2023–24 and 126 in 2025–26 (at ICML, NeurIPS, ICLR, CVPR and AAAI); its share of the topic grew, from 4.6% to 10.9%.

How this is decided

A benchmark is tracked when at least four papers of this approach report their own method on the same dataset and metric in at least two different years. Its record is the best number reported up to 2024 compared with the best reported in 2025–26: still improving means at least 1% better, flat means at most 0.2% better with at least two papers from 2025–26 trying. Numbers on a different scale from the rest (a fraction among percentages) and far outliers are left out. Results come from different papers with different setups, so they are signals, not head-to-head comparisons. The share of papers is counted at ICML, NeurIPS, ICLR, CVPR and AAAI.

How it got here

2016: 0162017: 0172018: 0182019: 0192020: 0202021: 0212022: 0222023: 1232024: 2242025: 24252026: 10226

Most cited paper of each year

Earliest papers here

What has been tried

28 papers here report 256 measured changes (a component added, removed or swapped, compared with a baseline): helped 68%, no clear effect 11%, hurt 17%, mixed 4%. Papers mostly publish changes that helped, so "helped" is over-represented.

Ablations in recent papers

What was changedMeasured onResultEffectPaper
Enable reasoning mode in Qwen3-8bMCPTox · average ASRaverage ASR increased by 27.8% (text); 14.0 to 41.8 on the average columnHelpedMCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers (AAAI 2026 · 7 citations)
remove trace dataSRE diagnosis · pass@1 (%)13.81% -> 9.52%HurtITBench: Evaluating AI Agents across Diverse Real-World IT Automation Tasks (ICML 2025 · 4 citations)
Add a defensive system promptWASP task-related · ASR-intermediate0.321 -> 0.167HelpedWASP: Benchmarking Web Agent Security Against Prompt Injection Attacks (NeurIPS 2025 · 4 citations)
Add self-reflection and episodic memoryRDR2 Follow Micah · successful runs(1/5) -> (2/5)HelpedCradle: Empowering Foundation Agents towards General Computer Control (ICML 2025 · 3 citations)
Add an “ignore all restrictions” jailbreak wrapper to deliberate-misuse instructionsDeliberate User Misuse · unsafe execution rateHurtOS-Harm: A Benchmark for Measuring Safety of Computer Use Agents (NeurIPS 2025 · 3 citations)
Add problem statement imagesSWE-bench M development split · % Resolved8.0 -> 11.0HelpedSWE-bench Multimodal: Do AI Systems Generalize to Visual Software Domains? (ICLR 2025 · 3 citations)
Enable retrying a different mitigation planAIOpsLab mitigation · success rate15.4% -> 69.2%HelpedSTRATUS: A Multi-agent System for Autonomous Reliability Engineering of Modern Clouds (NeurIPS 2025 · 2 citations)
extending turn budget from 30 to 50 turnsSyncBench time awareness · SRIndependent -0.33%, Collaborative -1.00%HurtSyncMind: Measuring Agent Out-of-Sync Recovery in Collaborative Software Engineering (ICML 2025 · 1 citation)
Fine-tune on successful trajectories sampled from the policy being updated, mixed with 491 off-policy trajectoriesSWE-Bench Lite · resolve rate15.3 to 8.7%HurtTraining Software Engineering Agents and Verifiers with SWE-Gym (ICML 2025 · 1 citation)
add the dual-environment architecture420 Python repositories · DGSR92.4% -> 100%HelpedRepo2Run: Automated Building Executable Environment for Code Repository at Scale (NeurIPS 2025 · 1 citation)
relax opacity from zero to 0.2, using FI (text)Full user request leakage, action step · ASR0\% to 16\%HelpedEIA: ENVIRONMENTAL INJECTION ATTACK ON GENERALIST WEB AGENTS FOR PRIVACY LEAKAGE (ICLR 2025 · 1 citation)
add a hierarchical API retrieverFiltered ToolBench G2-I and G3-I · pass rate22.4 vs 58.9; 15.8 vs 63.2HelpedAnyTool: Self-Reflective, Hierarchical Agents for Large-Scale API Calls (ICML 2024 · 1 citation)

What reviewers will expect

Datasets and baselines named in the 126 papers of this approach from 2025–2026 that have a full-text summary. Leaving out the common ones is a frequent review question.

Datasets

  • HumanEval · 8 of 126 papers
  • SWE-bench Verified · 5 of 126 papers
  • OSWorld · 4 of 126 papers
  • MBPP · 4 of 126 papers
  • CodeContests · 3 of 126 papers
  • LoCoMo · 3 of 126 papers
  • SWE-Gym · 2 of 126 papers
  • SWE-bench Multilingual · 2 of 126 papers

Baselines

  • GPT-4o · 13 of 126 papers
  • OpenHands · 10 of 126 papers
  • Claude Code · 9 of 126 papers
  • SWE-agent · 8 of 126 papers
  • GPT-4o-mini · 7 of 126 papers
  • Claude-3.7-Sonnet · 7 of 126 papers
  • Claude-3.5-Sonnet · 6 of 126 papers
  • Gemini-2.5-Pro · 6 of 126 papers

Recent preprints

Loading recent arXiv preprints…

    Who publishes on it

    Institutions on the most papers of this approach since 2023 (of 129 papers; from OpenAlex and the papers' affiliations).

    Use it

    Download BibTeX of 21 key papersOpen the topic in the interactive map

    Get alerts. Describe your idea in scime atlas and save it (free scime account): you get a weekly email when new preprints land close to it.

    Same keyword cluster

    Elsewhere in the topic

    Benchmark numbers, ablations and baseline numbers are extracted by AI from each paper's full text and can be wrong; the paper is the authority. Data: results index of 2026-11-02, citation counts from OpenAlex (2026-10-09).

    Get the next scime Dispatch and a monthly field update

    Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy