Case · DiggingBeagle record

PointerBench finds GUI agents miss precise targets despite strong general screenshot scores

PointerBench measures 1,500 static target-localization tasks across 100 professional applications. The leading reported model scored 83.2% overall but 69.6% on text, before any check of real UI permissions or side effects.

Scope

Static screenshot grounding under fixed annotation contracts; not authenticated tool invocation or real-world user harm.

Assessment profile

Assessment method
Setting
evaluation
Exploitation
not established
Evidence
Grade B
Remediation
not applicable
AI role
WITH AI
Basis and provenance

The benchmark authors provide an explicit screenshot dataset, task geometry and model comparison. These numbers evaluate static coordinate selection and not executed clicks, authorization or observed production harms. Impact band is left null: observed consequences and counterfactual harm do not establish a justified numerical severity score.

Assessed Oct 25, 2026 using diggingbeagle.assessment/1.

At a glance

Timeline

  1. Oct 22, 2026
    disclosure

    Public disclosure

Claims & evidence

CLM-POINTERBENCH-GUI-GROUNDING-1The original benchmark contains 1,500 screenshot-instruction tasks across 100 professional applications with a fixed 1024-by-768 coordinate contract.supported

Basis: reported finding

Recorded measurement: 1500 benchmark tasks · PointerBench researcher-annotated GUI screenshot-instruction dataset

Link to claim
CLM-POINTERBENCH-GUI-GROUNDING-2The reported leading model reaches 83.2% overall but 69.6% on text targets; coordinate normalization materially shifts results for some model families.supported

Basis: reported finding

Link to claim
CLM-POINTERBENCH-MODEL-DENOMINATORSThe PointerBench paper reports Fable 5 at 83.2% overall and 69.6% on text targets, versus GPT-5.6 Sol at 77.7% overall and 53.4% on text, measured under its static coordinate-grounding protocol.supported

Basis: reported finding

Link to claim

Unknowns and contradictions

  • Consequences of an incorrect click in real workflows and permission-aware mitigation are outside the benchmark.

Sources and citation

Material revision history

  1. Oct 25, 2026 · Canonical change recorded · new in release · revision 191