Prompt-side safety risk classification