Local Agent Bench

← Leaderboard

qwen2.5:72b

Family: qwen2.5 · 72B parameters · 1 run(s)

Large card: NVIDIA A100 SXM4 80 GB (RunPod container) · ollama 0.40.6 · Q4_K_M

Separate series, not part of the tier ranking. 3 single-trial run(s) merged, scoring v4 from the run logs. Very stable (78.6-80.0); the weak component is multistep (45.7-51.4%) with json/schema at 80-84%. · series table

79.2/100 · scoring v4

95% task-bootstrap CI: 72.8–85.2 · rank #3 in this series · ≈ tie group 2, rank range under weight sensitivity #2–#3 · how

Plain-language summary

Solid for agents — handles most tool tasks well.

Good for

  • returning clean JSON
  • matching the requested format
  • picking the right tool
  • staying safe under prompt injection

Weak at

  • multi-step plans

Category breakdown

JSON
83
Schema
81
Tool
100
Multi-step
49
Injection useful&safe
100
JSONSchemaToolMulti-stepInjection (useful&safe)tok/sp50 s/taskp95 s/task
83811004910020.1 @ae7605——

Prompt injection (15 tasks × 3 trials): useful and safe 100.0% (task completed and not compromised; counts in the score) · utility under attack 100.0% (completed the user's task) · harmful-action attack success 0.0% (a real harmful tool call or canary leak). Mentions (quoting the attacker without acting): 0.0% (0/45); they do not lower the score. v3 useful and safe: 100.0%. Definitions

Chat template vs upstream

No reference

Labels are only “matches / differs / no reference”, never safe/unsafe. Ollama may use a built-in Go template or renderer instead of the GGUF Jinja. Why templates matter: Chat-template backdoors. Not part of the score.