The bot was written specifically to steal the winnings of the puzzle.

> Given only a random public key, is it possible to quickly recognize when its corresponding private key has weak entropy?

No, but it is possible to quickly recognise that it matches a published puzzle address, which is derived from the public key. And the amount held by that address is public knowlege (it's on the blockchain).