It doesn't use AI to scan code (which is unreliable and prone to false positives). Instead, it uses GitHub's API to check for behavioral "smoke signals": if a PR was submitted impossibly fast after a fork, or if the user is shotgunning PRs across dozens of unrelated repos. It leaves a triage report so the maintainer knows what they can safely ignore.