Source-linked AI summary
WorkBench: a Benchmark Dataset for Agents in a Realistic Workplace Setting
Olly Styles, Sam Miller, Patricio Cerda-Mardini, Tanaya Guha, Victor Sanchez, Bertie Vidgen
TL;DR
WorkBench addresses the limited evaluation of agents on realistic workplace actions by providing a sandbox benchmark with unique, unambiguous outcomes. Its outcome-centric evaluation shows that current agents remain unreliable, with the best agent achieving 43% accuracy, while the benchmark’s realism is constrained by simplified sandbox data and single-turn interaction.
Problem
Existing benchmarks do not adequately represent workplace tasks requiring agents to take actions across external systems.
Source: §1 · pp. 1–2Method
WorkBench uses five sandbox databases and outcome-centric evaluation, comparing the resulting database state with each task’s unique ground-truth outcome.
Source: §3 · p. 3, §3.4 · p. 6Results
43% accuracy is achieved by the best agent, while WorkBench identifies failures in planning, tool arguments, and understanding tool limits.
Source: §5 · p. 10Takeaways & Limitations
WorkBench provides a scalable benchmark for evaluating agents on increasingly complex workplace settings and reveals weaknesses relevant to their use in high-stakes work.
Source: §5 · p. 10The sandbox may underrepresent real-world complexity, and the tasks are limited to single-turn chat, potentially overestimating current agent capabilities.
Source: §5 · p. 10
Abstract
from arXiv · showhide
We introduce WorkBench: a benchmark dataset for evaluating agents' ability to execute tasks in a workplace setting. WorkBench contains a sandbox environment with five databases, 26 tools, and 690 tasks. These tasks represent common business activities, such as sending emails and scheduling meetings. The tasks in WorkBench are challenging as they require planning, tool selection, and often multiple actions. If a task has been successfully executed, one (or more) of the database values may change. The correct outcome for each task is unique and unambiguous, which allows for robust, automated evaluation. We call this key contribution outcome-centric evaluation. We evaluate five existing ReAct agents on WorkBench, finding they successfully complete as few as 3% of tasks (Llama2-70B), and just 43% for the best-performing (GPT-4). We further find that agents' errors can result in the wrong action being taken, such as an email being sent to the wrong person. WorkBench reveals weaknesses in agents' ability to undertake common business activities, raising questions about their use in high-stakes workplace settings. WorkBench is publicly available as a free resource at https://github.com/olly-styles/WorkBench.
1 Introduction
WorkBench evaluates autonomous agents on realistic, multi-step workplace tasks using unique outcomes for robust automatic assessment. It contains 690 tasks and shows that even a state-of-the-art ReAct agent with GPT-4 completes only 43% correctly.
- LLMs’ inability to take actions limits their capabilities, while tool-using autonomous agents can perform actions such as replying to emails and booking meetings.Source: §1 · p. 2
- WorkBench targets workplace activities that existing benchmarks do not represent, including tasks such as sending emails and reviewing a calendar before acting.Source: §1 · p. 2
- Outcome-centric evaluation compares an agent’s resulting environment state with each task’s unique, unambiguous ground-truth outcome.This enables robust and automatic evaluation of action-taking agents.Source: §1 · p. 2
- 43% of WorkBench tasks are completed correctly by the state-of-the-art ReAct agent with GPT-4.The benchmark evaluates five agents and finds workplace tasks challenging.Source: §1 · p. 2
- 690 unique tasks are created by combining human-curated templates with programmatic task generation.Source: §1 · p. 2
- WorkBench contributes an open-source dataset, an outcome-centric benchmarking methodology, and benchmark results on current agents.Source: §1 · p. 2
2 Literature Review
Prior work studies tool use across planning, APIs, retrieval, dialogue, and simulated environments, but existing evaluations leave gaps in workplace realism and outcome assessment. WorkBench addresses these gaps by evaluating workplace-relevant actions and unintended state changes with unambiguous outcomes.
Tool Use Methods
- ReAct-inspired methods decompose user intent into a task, plan, and tool-execution sequence, with GPT-4 showing effectiveness across multiple tool-use domains.Source: §2 · p. 2
- Prompt demonstrations, tool documentation, tool embeddings, and explicit API-call planning are proposed methods for improving tool selection and use.Source: §2 · p. 2
Tool Use Limitations
- Studies report that smaller language models often struggle with multi-step tool use and tool selection, whereas GPT-4 can make correct API calls without in-context examples.Source: §2 · p. 3
Tool Use Evaluation
- General capability datasets such as Big-Bench, MMLU, and HellaSwag are limited for tool-use evaluation because their questions can be answered without tools.Source: §2 · p. 3
- Existing tool-use benchmarks cover diverse tasks, but many focus on information retrieval, single actions, simulated environments, or answers that are not unique and unambiguous.Source: §2 · p. 3
Web Browsing Agents
- WorkBench extends related evaluation by focusing on workplace-relevant tasks and measuring unintended side effects outside the target outcome.Source: §2 · p. 3
3 Proposed Benchmark Dataset: WorkBench
WorkBench is a workplace benchmark built from sandbox databases, realistic multi-domain tasks, and tools whose effects are evaluated against unique ground-truth outcomes. Its outcome-centric methodology evaluates whether the final database state is correct, allowing agents multiple action paths while supporting robust automatic assessment.
3 Proposed Benchmark Dataset: WorkBench
- WorkBench evaluates workplace agents by comparing the updated state of five sandbox databases with each task’s unique, unambiguous ground-truth outcome.The benchmark avoids real APIs that require authentication or change over time.Source: §3 · p. 3, §3.4 · p. 6
3.1 Sandbox Environment
- The sandbox contains simulated Calendar, Email, website analytics, CRM, and project-management databases, with representative records for workplace interactions.The databases include 300 calendar events, 500 emails, 500 website visits, 200 customers, and 300 project-management tasks.Source: §3.1 · p. 4, Table 2 · p. 5
3.2 Task and outcome pairs
- The dataset combines single-domain and multi-domain templates into 690 varied tasks, including challenging requests that can require up to 12 actions across domains.Programmatic generation creates 10 tasks per template, with three linguistic phrasings for each template.Source: §3.2 · p. 5, Table 3 · p. 6, Figure 4 · p. 6
3.3 Task Execution
- Agents execute tasks with 26 documented tools across five domains, using observations from tool calls to determine whether further actions are needed.Tool documentation specifies descriptions, parameters, return values, examples, and limits such as a maximum of five returned events.Source: Figure 2 · p. 4, §3.3 · p. 6, Table 4 · p. 7
3.4 Outcome-Centric Evaluation
- Outcome-centric evaluation accepts any action sequence that produces the ground-truth database state, so agents can recover from erroneous calls without being penalized for extra steps.This enables evaluation of action-taking tasks beyond prior benchmarks limited to information retrieval.Source: §3.4 · pp. 6–7, Figure 5 · p. 7
4 Results
WorkBench evaluates ReAct agents on workplace tasks using outcome matching, and results show substantial weaknesses across models, domains, and error types. GPT-4 performs best but reaches only 43% with all tools, while failures include incorrect actions, poor searching, and failure to follow the required action format.
4.2 Comparing Large Language Models
- GPT-4 greatly outperforms GPT-3.5, Claude-2, Llama2-70B, and Mixtral-8x7B on WorkBench.The weaker models commonly suffer from insufficient context windows or failure to follow the ReAct framework.Source: §4.2 · p. 8, Table 5 · p. 8
- 43% accuracy is achieved by GPT-4 with all 26 tools, while restricting it to required toolkits raises accuracy to 49%.The benchmark remains challenging for all evaluated models, and redundant tools appear to reduce performance.Source: §4.2 · p. 8, Table 5 · p. 8
4.3 Performance across domains
- GPT-4 accuracy ranges from 23% on CRM tasks to 65% on Calendar tasks, with 40% accuracy on tasks spanning multiple domains.Cross-domain performance is similar to the 43% average on single-domain tasks.Source: §4.3 · p. 8, Table 6 · p. 8
4.4 Sources of Error
- Agents can produce side effects by modifying the environment incorrectly, such as cancelling the wrong meeting instead of the ground-truth event.The example predicts deletion of event 00000196 instead of event 00000035.Source: §4.4 · p. 9
- Errors without side effects occur when agents fail to complete tasks without modifying the environment, such as searching the wrong date for meetings.In the example, no action is taken after searching 28 November instead of Tuesday 21 November.Source: §4.4 · p. 9
- The most frequent error is failing to produce the required ACTION keyword and JSON tool call, so no action is performed.This failure motivates resampling up to five times with a nonzero temperature.Source: §4.4 · p. 9
- Resampling increases GPT-4 accuracy from 43% to 49% when the agent fails to generate the required ACTION keyword.Other errors cannot be fixed by resampling, including hallucinated email addresses and failures to use search tools.Source: §4.4 · p. 9
- Agents also fail when searches return limited results, because they do not repeat searches and deletions to cover all matching future events.Incorrect date searches create additional failures on meeting-cancellation tasks.Source: §4.4 · p. 9
5 Discussion and Future Work
WorkBench provides scalable, outcome-centric evaluation of workplace agents while revealing substantial performance weaknesses and several scope limitations. The authors propose extending the benchmark to more complex, multi-turn, broader-domain, and retrieval-focused settings.
5 Discussion and Future Work
- The sandbox may underrepresent real-world complexity because actual inboxes contain many long, noisy, and erroneous emails, potentially overestimating agent capabilities.The authors propose adding more challenging sandbox data.Source: §5 · p. 10
- WorkBench uses single-turn chat despite multi-action tasks, while multi-turn interaction may better represent realistic workplace tasks.A human baseline could clarify task significance but would also measure GUI quality.Source: §5 · p. 10
- Agent performance dropped as the number of available tools increased, but this relationship was not fully explored with 26 tools.Adding tools from domains such as HR could support broader analysis of accuracy versus tooling breadth.Source: §5 · p. 10
- WorkBench does not assess pure retrieval tasks, although retrieval tools are intermediate steps in many benchmarked tasks.Future work could add dedicated retrieval evaluation.Source: §5 · p. 10
- 43% accuracy was achieved by the best agent, with errors including failed plans, incorrect tool arguments, and misunderstanding tool limits.These errors can have negative consequences, such as sending emails to the wrong people.Source: §5 · p. 10
- WorkBench offers a large volume of high-quality, unique tasks and can be extended to new domains through its scalable task-creation approach.The authors specifically mention adding accounting tasks and progressively more complex settings.Source: §5 · p. 10
A.1 Simulated database creation
The simulated database creation section introduces a sample of rows from each sandbox database.
A.1 Simulated database creation
- The paper presents five sample rows from each of the five sandbox databases.Source: §A.1 · p. 14
A.1.1 Analytics
The analytics database records website visits and their engagement-related attributes.
A.1.1 Analytics
- Analytics records each visit’s date, visitor ID, page views, session duration, traffic source, and engagement status.Source: §A.1.1 · p. 14
A.1.5 Project management
This section describes WorkBench’s project-management task diversity, including multi-domain workflows and variation in the number of required actions. It also outlines the associated task-management, customer-relationship-management, and directory tools, together with the protocol for iterative tool use and final responses.
A.2 Example tasks
- WorkBench includes sampled analytics, calendar, CRM, email, project-management, and multi-domain tasks requiring conditional, coordinated workplace actions.Examples include plotting analytics, scheduling or canceling meetings, reassigning CRM records, handling email, updating tasks, and combining checks with follow-up actions.Source: §A.2 · p. 16, §A.2.1 · p. 16, §A.2.2 · p. 16
A.3 Template dependence
- Three linguistic templates per task introduce variation, while GPT-4 accuracy ranges from 10% to 90% for most templates.Figure 7 reports that only 15 of 69 templates have either 0% or 100% accuracy, indicating diverse tasks within templates.Source: §A.3 · p. 17, Figure 7 · p. 18
A.4 Impact of “no action” tasks
- 122 of 690 WorkBench tasks require no actions, such as checking whether a meeting condition is met before deciding not to schedule.The agent can use calendar.search events to determine that the condition is unmet, and Table 7 compares accuracy across subsets grouped by required actions.Source: §A.4 · p. 17, Table 7 · p. 18
- Agents perform better on tasks requiring no actions, although the comparison is affected because all tools cannot fit in the GPT3.5 and Llama2-70B context windows.Table 7 evaluates accuracy by the number of actions required and notes that all tools are provided in the prompt.Source: Table 7 · p. 18
A.5 Prompt and tool descriptions
- The full prompt provides the date and current time, requires meetings to start no earlier than 9am and end no later than 6pm, and lists available tools.Listed tools include searching emails across subject, body, or sender fields and deleting an email by ID.Source: §A.5 · pp. 18–20
- The accompanying analytics tools count engaged users, visitor traffic, and total visits over date ranges, retrieve visitor records, and calculate average session duration.Analytics queries use YYYY-MM-DD date bounds; visitor records include fields such as visit date, page views, session duration, traffic source, and engagement status.Source: §A.5 · pp. 25, 26, 27, 29
- Analytics data can also be plotted for selected values using bar, line, scatter, or histogram plots, with the tool returning the generated plot-file path.Supported plotted values include total visits, session duration, user engagement, and traffic-source categories.Source: §A.5 · p. 28
- Project management supports task lookup by ID and field, searching by task attributes, and creation, deletion, or updates using structured parameters.Search filters include task name, assignee email, list, due date, and board; task updates can modify task name, assignee, list, due date, or board.Source: §A.5 · pp. 29–32
- Task retrieval returns selected fields such as task name, assignee email, list, due date, or board, while task creation returns an 8-digit task ID.Deletion and update operations return messages indicating whether the requested operation succeeded.Source: §A.5 · pp. 29, 31
- The customer relationship manager supports searching customers with identity, status, assignment, product-interest, contact-date, and follow-up-date filters, returning at most 5 records.Search results include customer information for the supplied parameters.Source: §A.5 · pp. 33, 34, 35, 37
- CRM records can be updated, added, or deleted by customer ID, with supported fields, constrained status and product-interest values, and success or identifier outputs.Adding a customer accepts contact, assignment, status, product, notes, and follow-up information; updating changes one specified field.Source: §A.5 · pp. 34–36
- The agent must emit one JSON action at a time, repeat Thought/Action/Observation cycles as needed, and use Final Answer when it knows the response.Valid actions include email, calendar, analytics, project-management, CRM, and directory tools, with action_input specifying tool inputs or the final response.Source: §A.5 · pp. 37–38
Related papers
This paper cites
- Language Models are Few-Shot Learners2020
- Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks2020
- Generative Agents: Interactive Simulacra of Human Behavior2023
- Voyager: An Open-Ended Embodied Agent with Large Language Models2023
- ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs2023
- Sparks of Artificial General Intelligence: Early experiments with GPT-42023
Cited by
- Work Agents: Systems, Capabilities, and Optimization2026
- FlashScript: Compiling Recurring Agent Workflows into Reusable Neuro-Symbolic Programs2026
- MMEnterprise-Bench: Evaluating Enterprise Agents over Evolving Multimodal Records2026
- Tev: Scaling Long-Horizon Agentic Environments with Dense Progress Rewards2026
- RAISED: Self-Distillation for Robustness to Prompt Injection in LLM Agents2026
- Lost in the Request: How Communication Variation Disrupts Retrieval and Action in Email Agents2026