Answer
There isn't a reliable table/query-based way to determine this directly — it generally has to be verified visually, by identifying which APIs a given form or window actually uses and then cross-checking those specific APIs against what's granted (Full vs Query) within the permission set. When building permission sets meant to be genuinely read-only, active hands-on testing (actually trying the restricted actions as a user with that permission set) is the recommended way to confirm no unintended Full-access grant slipped through in an area you meant to keep query-only.