When I suspect an agent opening a PR I check their GitHub activity. They have usually opened dozens of PRs. Most of them are ignored, high profile packages close them, and AI related projects blindly merge them. They also tend to create dozens of private repos and commit to them non-stop.