It simply uses the “Not Hotdog” algorithm from Silicon Valley.

On a more serious note, it likely does on-device pattern recognition, similar to how other apps like TIDY works and will put a warning/blur if the image matches specific keywords.

Not sure why they didn’t just merge the capability into the Private Compute Services app instead.