If something is built as a browser extension and the requests it sends look like the browser would normally then it must be hard to detect.

The requirement for the extension/plug-in has to be that: it looks like someone uses Twitter normally.