All internal ops are listed as coming from "MongoDB Shell"

If you run currentOp (the inprog command) and give it the flag to list all ops, even ones that are not "active", you will see that all internal operations have an appName of "MongoDB Shell".

Here is an example:
https://logkeeper.mongodb.org/build/20377e3d59ebcb239f4cb073cd7cefd6/test/57c6eac4be07c434ff040d28#L55396