Technical writeup from a few weeks ago by a vendor that explains how LinkedIn does it, then boasts that their approach is "quieter, harder to notice, and easier to run at scale":

https://blog.castle.io/detecting-browser-extensions-for-bot-...