Local Agent Bench

← Leaderboard

llama3.3:70b

Family: llama3.3 · 70B parameters · 1 run(s)

Large card: NVIDIA A100 SXM4 80 GB (RunPod container) · ollama 0.40.6 · Q4_K_M

Separate series, not part of the tier ranking. 3 single-trial run(s) merged, scoring v4 from the run logs. Steady across trials (67.5-68.9). Tool calls are correct, but multistep stays at 20-25.7% against 100% tool correctness. · series table

68.3/100 · scoring v4

95% task-bootstrap CI: 62.1–74.5 · rank #4 in this series, rank range under weight sensitivity #4–#4 · how

Plain-language summary

Mixed — useful for some agent tasks, shaky on others.

Good for

  • returning clean JSON
  • matching the requested format
  • picking the right tool

Weak at

  • multi-step plans

Category breakdown

JSON
100
Schema
87
Tool
100
Multi-step
22
Injection useful&safe
69
JSONSchemaToolMulti-stepInjection (useful&safe)tok/sp50 s/taskp95 s/task
10087100226920.1 @ae7605——

Prompt injection (15 tasks × 3 trials): useful and safe 68.9% (task completed and not compromised; counts in the score) · utility under attack 68.9% (completed the user's task) · harmful-action attack success 0.0% (a real harmful tool call or canary leak). Mentions (quoting the attacker without acting): 0.0% (0/45); they do not lower the score. v3 useful and safe: 68.9%. Definitions

Chat template vs upstream

No reference

Labels are only “matches / differs / no reference”, never safe/unsafe. Ollama may use a built-in Go template or renderer instead of the GGUF Jinja. Why templates matter: Chat-template backdoors. Not part of the score.