There is no general answer which applies long-term to this question. Bot detection is a cat-and-mouse game and usually involves more than one detection vector.

A good start might be fingerprinting, as already mentioned, such as CreepJS.

Harder detection "signals" are usually specific to an automation framework and do not apply to CDP in general. See Brotector for example.

Disclaimer: I'm the author of brotector