Red-Teaming the Stable Diffusion Safety Filter