By the bot detected users and posts will need to be checked anyway (especially in the first time). So it makes more sense to first create a platform for managing detected cases.

All actions the bot would take should also be possible manually within the Security Center. As I can't predict how good the automated detection will work, it might be better to add it as kind of a plugin that can help but is not essentially required.