I have a bot I wrote to help me with various web tasks that are too tedious manually. I just tested it against this and it says "isbot: false".
edit: looks like it only detects bots that overtly identify themselves as bots, e.g. Googlebot -- it's designed to identify clients, not as some sort of security device
The worst bot normally doesn't identify themselves as bots.
A really useful flag would be "isAIBot" so you can tell them to f-off. A colleague returned from SRECon and had been asking around in regards to bots from AI companies and it's getting ridicules. AI companies are just hammering sites left and right, to the point where some are hitting the limits on their deals with hosting companies and transit providers.
And you can't filter them out, because their running on AWS, Azure or GCP IPs and aren't identifying themselves properly.
edit: looks like it only detects bots that overtly identify themselves as bots, e.g. Googlebot -- it's designed to identify clients, not as some sort of security device