I was thinking that using selenium or similar would allow the bot to circumvent any block that works in a browser. Since it's probably not doing a million PRs at once, doing that would be viable. It could even use the cookie from the selenium session to then use the api directly.

Kinda like flaresolver does for prowlarr/jackett.

In which case Anubis is only a temporary measure until the vibe coders wise up.